{"report_id":"29ad1fdf-1990-40f2-988a-f238c61b131b","version":6,"status":"done","tags":[],"date":"2026-03-05T21:32:42Z","url":{"schema":"https","addr":"eulerfinance.run","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"104.21.27.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eulerfinance.run/","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"title":"Euler Finance Deposit | Euler Finance Staking | PYUSD, SPYon, TSLAon Lend \u0026 Earn","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T05:46:54.344469Z","times_seen":17684990,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"eulerfinance.run","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"104.21.27.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T21:32:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"eulerfinance.run","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-05T21:32:44.002403Z","last_seen":"2026-03-05T21:32:44.002403Z","alert_count":93,"request_count":93,"received_data":6643560,"sent_data":43202,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eulerfinance.run/vue-animations-19.4.8.min.js","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ee962d9fe6e393a21bed1c16ef9d60","sha1":"edca22972da7487ce5ac5d236a1655e83d9f3efb","sha256":"96cd7de728e122009133aae9ec89e16ad467911ecfdd708ab7b6db251fa73427","sha512":"6b0670d15f02391bba72710bd7b4a7dbca9c6bcbb297295782cf0b38e7d14a81dc9c453ba168e44e5dc7677d3bd58b41ead058d377d5328ca62eb50d30dc4f4e","ssdeep":"1536:1cwYJrldXHXTdXITA7/Qj8/Ez24HqgZe+IhSt6:1cwYJrldXHXTdXI8j4KMe+N6","tlshash":"3e240ee9db8b84ec8e56119dc473fc05e1585d23ceacb193aa2edec13519f62848713b","size":222745,"data":"","first_seen":"2026-03-05T21:32:50.012685Z","last_seen":"2026-03-05T21:32:50.012685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f4b9f92be8093768b53f1a856ac0fc1","sha1":"23e687682576489a81155072500fb8f0dc177eb8","sha256":"3c6cd598852dc71f33dec31d9f66b51032542ad2d62428ea38112efb6de01125","sha512":"9440d322c254f49627aad12b9f2e335cf35b42c04bb812a825bc0dbc4242201c6c6081c08969f71c72178e9d5f29243502d8930888abb902e1db00f73ed9d0f2","ssdeep":"","tlshash":"5ed05e593030757a2cce282d588e088a7f328411e2086cc9d9ecc4486ef5e6801d0989","size":243,"data":"","first_seen":"2023-07-23T20:18:13Z","last_seen":"2026-06-29T00:34:58.501055Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-08-02T13:00:32.550671Z","times_seen":1386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eulerfinance.run/0x66526197a4BAf496D97e1004e43c2C374Fb7d2E7.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x66526197a4BAf496D97e1004e43c2C374Fb7d2E7.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNCv0i8DnFdRCj5uYrZtZf0ZqSrXE5bkqk%2BAg78%2BaEQqsCxZQ7DErfaubXTrh%2ByBAWWrieaqlY5sJKcM%2FoRr%2F4Q5C7B%2BMRgngVPsTm4gpOk%3D\"}]}\r\netag: W/\"69a9a06e-3b6\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81e8199e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":950,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"766474dd9df33b46aca21a90a5ee4db1","sha1":"1a3a22ac75a0d02bb0ad702f86f0fa685bd7af9c","sha256":"938a3591021364d21140143bd6b4684038b67d66fc5c5a290715ed1c92bd1342","sha512":"6e05707b178702a1fc5883a244bce62cc06758b759aea8239035ba19244e8f69d2e6948e380d4c4b6dc33d86001a7cfb40a0d4797663e46d68db59f64ce8a49e","ssdeep":"","tlshash":"d91110e973fc83d86100c33a97ab34e0243365952b59c954769839eb73195ee2650a84","first_seen":"2026-03-05T21:32:49.97168Z","last_seen":"2026-03-05T21:32:49.97168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x6c3ea9036406852006290770BEdFcAbA0e23A0e8.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x6c3ea9036406852006290770BEdFcAbA0e23A0e8.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 35913\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-8c49\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itEJ4OJxp9lTjX2jYTQGdHwX2EygjWjBWb%2FsDiUBQlnqDair5WuLV8IIzEXy%2BxmMDThUbKQ3aiPZLStIxz%2FkU1F%2Fd20syHtlt2%2F2ABVCt8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f749e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 16-bit/color RGBA, non-interlaced","md5":"b98bc4e90cc351f1fd84058127d8273c","sha1":"63c7d3530587320d0ba6e62694f6e773aad6c1af","sha256":"0307f3e2a2827c2a2acb2858fba8d5f28671ebfc50391649d06a7c0f7a74e861","sha512":"df02f0bc781f917137520bfac58f4a199296bbe272395424b6d4474b101e0759ad7f1a22c0921d29ab4f312dc0fd7ebd658491707b810a1250a06659060042b0","ssdeep":"768:UT/YTbQmS8sz6NQN649ndoB8ZTb2eMZ4osgjoq/6SDYy26jUTYH372F6FfE:UcTcIs2w6E1oiofUi6OYNFYXaSfE","tlshash":"c8f2f1861c31793c63fb90d84a5594a381803ea57dea9ad51e4df1fbf317ca88682670","first_seen":"2025-06-27T14:27:46.755489Z","last_seen":"2026-07-21T06:12:37.707758Z","times_seen":34,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xf6b1117ec07684D3958caD8BEb1b302bfD21103f.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xf6b1117ec07684D3958caD8BEb1b302bfD21103f.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 21170\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-52b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXPjGCTEskMrzRgW9fUug2IoVLcCwaE5IIHq0Bww%2F5ZCz418BtRC1x%2BEigDTIMneylVUCm1UEFZBvCx9V2RH9faIdYnpADNNykETcB2q8H8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af879e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5e8c2dc703bfcd18b334045d0a0d685d","sha1":"2f09248c74b1386c3c9f5e364b3419983fd64bc3","sha256":"55870cc256564d4ae85049d821d7b28d677c8f1e638cdf04213ece56bc55c945","sha512":"8273f57e3aa9fcda4b41c604a200d98cae7a2ba831c6d080177130f4c8d12ce234a20da8e03d1042256b48f05309d3ee5ec263690550cba0ed6cd8434b68b744","ssdeep":"384:mIO9s+egPoDTKzsVgstoDvm4HsglhtHvaq0C1q:/lbDss6vftHCvR","tlshash":"6e92e1f848cc90a0d506e1f132b01a94e55eae15cb445e4f45bffc6ebd7b742a414b9c","first_seen":"2026-03-05T21:32:49.973989Z","last_seen":"2026-03-05T21:32:49.973989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xC139190F447e929f090Edeb554D95AbB8b18aC1C.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xC139190F447e929f090Edeb554D95AbB8b18aC1C.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 31041\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-7941\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PO%2Fg0YddeANJ4n%2F1prbOy1sPiOo3ArPLnxKMeuJr3odqKCiGN94IPNs5LDa9%2F6aVtI4KVwHvCvHySoKpDm6DwqNs1bLrrYdPhncer4vhE4k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfc59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"e997e7c0f70e26218c2e13e090a5e8d2","sha1":"4ef0ce3a90e280a83ed280c50004d987f58b32a6","sha256":"c1bb7402d4923e588a5124b79ca0de4dc7e49eef55d230e1234d1e2b44c8de3a","sha512":"e7f81d4ceedff230fbcfa5dbdd3e6c61af7a933346733d8ad2e34a2dea3ef829cce59f21159e35fc0dcb0e78e4cd1b0b8a0dc181df24d1ebd9c418a0d4f2af15","ssdeep":"768:T/k6yxtgDajunF+EUtJGqfIgLjtl4yFpZyvRO:TkFiDa6nF+EUt8IIgLjfHyvRO","tlshash":"95d2e0187439ef599ed8cda0e57932c6c92ea09e6f06cda0d899f90f84580f27f57321","first_seen":"2025-08-03T23:21:17.282582Z","last_seen":"2026-03-05T21:32:49.974962Z","times_seen":15,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xc824A08dB624942c5E5F330d56530cD1598859fD.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xc824A08dB624942c5E5F330d56530cD1598859fD.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 23582\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-5c1e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3D4Tg%2Fg1FvgrFvjrq2MtW%2BMdXRI0%2BYpQLucVRRzRV7QypUE3l4pHOr6oXV1uiBnmw1uimo0fykYEohjGxnkRb2DFNMQOWXFDIAUxCVksu%2BY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dff99e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8b5aac4e8ba9e9c653145954be78ee69","sha1":"b44f53b48bad4b5bcb027b689316b65a1d1e98be","sha256":"1b8a74127e1cb794c47c36808bb5f8e7a7cd6b5a10ff990e217be2495465c2c8","sha512":"30cedfc33a5bce22ca544690e80ebd6b132010d842575d949adf9f737e6d39a8c148471fa091d383cf19d347c7e6dc4cc538c78141793bb2d2216d19daf7db14","ssdeep":"384:SZ/6mmr6tw7yTarFH+Ap5xjOvIQ7TSDnTVyoWlxnp5RjDUz2aL38tquwutLzqktH:CU6tw7yTarUSxivIWEnTVytxp7iBz4vt","tlshash":"01b2e0ad0d55bde945f7fb8cc00bad60f9c4768fa835fda80454f69eba42b4b019908c","first_seen":"2026-03-05T21:32:49.976282Z","last_seen":"2026-03-05T21:32:49.976282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/ethereal.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /ethereal.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7qG2hg4tfCZLGVz5go4UdD8dxoPf3w6V3nzQPvdi7yhBNyf0GoCCMdr8j3ZPaf2sjXkHHFg4saokcz2XEqthY00QK8Ymwb%2Fl%2BOYMKqebZw%3D\"}]}\r\netag: W/\"69a9a06f-11e42\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f8339e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f6f4382eb370bcef04a073ebce42383","sha1":"8592ec3fe2e51f7088553ecd235aaf3f820dccd6","sha256":"acebd314cfb1e7919588c3b3548ec0f55cd3560f91d7826d54e0f751514e66bf","sha512":"8bcf1a973fe932d394557d15e76933c881ff37fa9ba6e192bccc6ba62d080f0fcd247bbe13adba3938c87fce61f2ffcc6ae0995ff77e6cdc34de653b4b5e0ae3","ssdeep":"1536:CNQfWN4ju90YCXQwdxYXsGVWWVHLxAovr8meRutDoVUZI6AAldWJR:CGeujpdXQ+G1VWWVrjjDeqDoVUW1ow","tlshash":"306302f5c233cece858943890ab66f4f4d49507aae4710cd428a725d6dbb4b827f2e06","first_seen":"2026-03-05T21:32:49.977321Z","last_seen":"2026-03-05T21:32:49.977321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/apostro.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /apostro.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2001\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-7d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGIVbbwyi6Y0VT%2Fu1n3mfmh0GyvMMFRtfW7eVGocMk87MdaQ6hhMhRk2BKW2p2VnbJflsq7YJjAFRKSl5fMt6uq95hzIq2o%2FWIlljIaMQaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b8208439e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2cfb2df03d99facc3cf9c773afbec353","sha1":"b9c800cc472bfd423f265ffb3190b3bb73b16d58","sha256":"810e53a4cc57b284671a89ca6e86bb05df499d8dc6a160e6718a7b15d5564b4e","sha512":"98dc767c9f940f74bc32cde40a826c4f54efda3abb96a64bc8bd1d70c65a5b4dd01c0935eb26f0c47ad17df3fe724e497b8f9172587baa7fe65d3c7d5680c7a8","ssdeep":"","tlshash":"89410c6a2440a14cf7cd3531ceaa4523422f1db0e31dba460e205b59631b0a6f1e4f5f","first_seen":"2026-03-05T21:32:49.978136Z","last_seen":"2026-03-05T21:32:49.978136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xA8c8861b5ccF8CCe0ade6811CD2A7A7d3222B0B8.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xA8c8861b5ccF8CCe0ade6811CD2A7A7d3222B0B8.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 36976\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-9070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnlbLUPLYFdbl0bVBoa0xSTDy9BeigJEEjN3TpxIDvfCxigPmexgxmFAPd%2FzvWp%2F12jTWu7qQDgRDfAjRu1kHT3YXI%2BPq%2BLQTewVSp3gU8o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b8218589e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"425169ed6c7f2db6b6163a3f74405813","sha1":"b125e9290bed46fe19985f228812d41bacffce41","sha256":"d54a2f7b8c5fa4bfdc4580c898059db8b5cf80411d657a9646ae36c784c27d8b","sha512":"45f923a7709424241c05c7a37491e61105f7b0fb0c78e6be2824727c3558670f30a25621cb30f0ee9c6d6321e5c787d5922fa2cb1fe0314eca9c43e3f5e241f3","ssdeep":"768:tSsOMZ61Bsvn8uBKtCK2RPI2g3FAqCRtQozfcSR4BHdLcJlWhQePLU3rC9:7cfsvnn80LRPIHCRtZcSRZrwQePL1","tlshash":"7ef201af883b40c745168a51d09438e9c0f1b75732884ba0a3ef133789d6d1169da1ee","first_seen":"2026-03-05T21:32:49.978915Z","last_seen":"2026-03-05T21:32:49.978915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x5a5b93F762739fa94F3EcC0b34Af2e56702E7f70.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x5a5b93F762739fa94F3EcC0b34Af2e56702E7f70.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 36976\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-9070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCTuveva%2FbwFumGHr8kF%2BOiuacrgwfrELaP7EGNmQiagH7hDwzh%2F4FfFRgAExkZf8Anxm355DT7AU5TmPWvulw0zH87UbAuhgWoa2BRgF8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b82185b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"425169ed6c7f2db6b6163a3f74405813","sha1":"b125e9290bed46fe19985f228812d41bacffce41","sha256":"d54a2f7b8c5fa4bfdc4580c898059db8b5cf80411d657a9646ae36c784c27d8b","sha512":"45f923a7709424241c05c7a37491e61105f7b0fb0c78e6be2824727c3558670f30a25621cb30f0ee9c6d6321e5c787d5922fa2cb1fe0314eca9c43e3f5e241f3","ssdeep":"768:tSsOMZ61Bsvn8uBKtCK2RPI2g3FAqCRtQozfcSR4BHdLcJlWhQePLU3rC9:7cfsvnn80LRPIHCRtZcSRZrwQePL1","tlshash":"7ef201af883b40c745168a51d09438e9c0f1b75732884ba0a3ef133789d6d1169da1ee","first_seen":"2026-03-05T21:32:49.978915Z","last_seen":"2026-03-05T21:32:49.978915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/usual.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /usual.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iq%2FqHrUgT7EnMLtE7ITqGDUs9vACR9WvnEvHElQ0sI4nWz3PKovnqryRMv%2FHH8UMCQvuWA5Pc%2Bq597jEnlGB890CnCTobszEbUVcXtqSZo%3D\"}]}\r\netag: W/\"69a9a06f-46bf0\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81af9d9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289776,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bdd9174372196b0028629d3954e7604","sha1":"fdcc58ba966fb405c398616ebec9e580d5c2be83","sha256":"c8dee9cdb4d8fc291590451d143fbdb72eeba49a5f91d9027a50df400f24dc38","sha512":"5728cf113495b1d101a786c1b494ac9627872c0954f9898b6191c4f14ffa9de6da222b3b871ce6b777a66ee76dae608396c76b4254d69dc50f9accee2320c126","ssdeep":"6144:+u6E6PVTWsERa+l17053ZqDAKXn1lm72qgxDbAcquDCVYfp4:EdtTjERafVcD3lm7IPA/uG","tlshash":"485423724d35e95fac27c8bc60fe1e2653b19f9da94c21aa9c4c8b3e8261d46857df00","first_seen":"2026-03-05T21:32:49.979819Z","last_seen":"2026-03-05T21:32:49.979819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x3DB228FE836D99Ccb25Ec4dfdC80ED6d2CDdCB4b.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x3DB228FE836D99Ccb25Ec4dfdC80ED6d2CDdCB4b.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 34831\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-880f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHJ4PiZI1kZeqoY3WfdauOKf36Ty71x0N1WdEk71nFk7xeqiC3kJRVKADcbM1E7FKkSGb%2BI1SmUFQ3GxjJ2Qt72y%2F3PjMKXsU8oZPe8Zrsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfca9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34831,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"3dfa8867735dc26d724d2b6caeb721a8","sha1":"ff822843a44fe494f7c6eaef007559f01c09079c","sha256":"3dbbe1a8c585671a7c815431f69da9bd61f0c0a7c0b08a692a20cf9867f0e78f","sha512":"dbb8aae4f6cd9055a513ea88c07d339415c8c2b561de254802de13a641877e24272f0a0ab442de6a8dd7627814f22db3aa3cb2ba3c39c1b65e401e6b30b600bf","ssdeep":"768:w/1MnBf04iNoqOgO4ISzCDtlnIccphZ52dvL:w/1ewLISz2xIccphZwL","tlshash":"46f2f1db25b8e1ec87d441a4c97d43d4821aa6980ee1343edacae5c0f4f36bc55a362d","first_seen":"2026-03-05T21:32:49.980545Z","last_seen":"2026-03-05T21:32:49.980545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x030b69280892c888670EDCDCD8B69Fd8026A0BF3.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x030b69280892c888670EDCDCD8B69Fd8026A0BF3.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 28386\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-6ee2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUvCHJ9QE27Om8vdKCgpZTPB%2Fc2JiejmCOsYyPxtjwb7TTvRpigEmv8GERKRN4jNTk8B8%2Feyn5lH%2BrB%2BjiRGRVFT68Lw8a%2FDKNcrYXQ9aw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e80f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6f69a03a29aa79d793a7d6a3bee552ae","sha1":"2da6d8ee2c95ab66919d554efa46b29be0ffbb28","sha256":"3e7556d0660d6e008823bec303380bc8fd27835e82db9d4bd7e1398f06445286","sha512":"cf05b43a9456b6d3c2c558acf07d7276099034cc822e253af2b84059e919353d5ab6ea5cfd256a1c3a553b01d4ddc3ad4741da728c9338be70134589a5b2b4dd","ssdeep":"768:1ijeKp1oksk9dcMNjnB6QWSPwmJr2DkQxUkKWQlaD:AeK79dcUB6QLP5sjKpI","tlshash":"7fd2e10cdd62ecfb8f9c1118b0e62719727b0420adc6e0a594a7d31d09fb79571eaa17","first_seen":"2026-03-05T21:32:49.981919Z","last_seen":"2026-03-05T21:32:49.981919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x3d7d6fdf07EE548B939A80edbc9B2256d0cdc003.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x3d7d6fdf07EE548B939A80edbc9B2256d0cdc003.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExrvaLwzU8ywnzB3xNoOcgDL98hwRzppq0skL3VXxWDzWz%2B%2Btd7jnM2maCDD%2FLGJ8v2gmEDu5kUgmaRZvZ8ybEoxjwVz%2BMorfBCVrTXIUiA%3D\"}]}\r\netag: W/\"69a9a06e-b5d\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f83e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2909,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1e067612115dc01860499cef2e1b710","sha1":"2f1f3c1e7aa9f170344668e6c2a7a6ff1b9fccac","sha256":"e9e059ad979292263bdd74977b8c1d64a1575f8aa514129daa985702541bcf7a","sha512":"e941066f454a8a0bc30658d636c7a8605e49530cfe29eefb9b17c63871918cdccfe3ff981ad0c2058470f09aa03399aff0082e71e0f3feaac66b70dda7745b36","ssdeep":"","tlshash":"d95163e553d0a069f54dd7f4ce7bb8787a77203e1b34e9440bf80e6ae31540e099d992","first_seen":"2026-03-05T21:32:49.982831Z","last_seen":"2026-03-05T21:32:49.982831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/Inter.var.730e8169.woff2","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:18.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /Inter.var.730e8169.woff2 HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/97b781381ec650eb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 324864\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-4f500\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njYTdPEwURNHx3LwuWJVkjX2lzjj4BTa176f7720DD25zZiaB1Z0NRFj7u9RTF6gVm9zYoiJSLJagLaA9Lc31qdYaF%2F6%2B2hAUTiZPfGOjuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b859d079e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324864,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 324864, version 1.0","md5":"8dd26c3dd0125fb16ce19b8f5e8273fb","sha1":"f919da7384706d6924f10d56ce258129ed498845","sha256":"85f08b5f51e36ca7e961a033c6bb61d7f0e44aa0984646383ecac648e98fdcc8","sha512":"600aed792990a913df1dbef8de20fdb818f6c422a8b01d319b7bfdacfe53186bc05709d844d07c354ebd740bd62ceb50efc3293333da84de8e21a4c11645cce0","ssdeep":"6144:G8RGxGe8Oe+OyKNJjAzcrrQ6FSJISb1Hp5W2eca+yptnFQhVEYwx0H:NGxGupO1J8zcrdFSJIu1JsBhrpZvBxA","tlshash":"226423416f8dfbc8e45550a0e4d3f23e6b6f7150242668ec957ada0c78f0437be52e62","first_seen":"2023-05-09T10:38:28Z","last_seen":"2026-07-31T20:06:39.684324Z","times_seen":2878,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/favicon.ico","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:18.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:18 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 20709\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLXzeILAxvg56%2BULW%2FWOH0mtTFfD5%2BnmkoP%2BzIvYn0hjuIpz%2BpZIqJA0NqGgu%2FK9r9h%2FoQkf4AVFZ%2FnEaH8HXQdBqxZHQZ%2B1bQzkSNwIiRI%3D\"}]}\r\netag: W/\"69a9a06f-3c2e\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b87afc79e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e86cb4d3e27c9c3d114c0b68c81b234d","sha1":"824f3fb552f81341353a81fc9204585f4f654686","sha256":"a9e66dc3ee94ae03594572d156e7f8db4e0a54b0f9055513a0e86c781b3d0bdd","sha512":"b8230cc7fba3659f4fe62c9845300221ac94ba185fc7c964ae4510cc7d76b638c6edd3e7a012e34edfa63d0dcef60e345a8301816189521dc1ef3bae451ae2ba","ssdeep":"96:G+utpodbo0dImu3R2tg7x4/2lr0zbJRpADPrqSz9yc:G+u3oK0dQh2i9rwJRO7rF9yc","tlshash":"a462f849a34b3cead506747c0b48ade0c97b8bb04822d9791fd1764fa3223a5f526b47","first_seen":"2025-03-07T09:57:12.219733Z","last_seen":"2026-03-05T21:32:49.984136Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x9D39A5DE30e57443BfF2A8307A4256c8797A3497.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x9D39A5DE30e57443BfF2A8307A4256c8797A3497.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 24712\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-6088\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhn1nVyQMbEhaK2ugpfjUlOou4PVP%2FtUNNlHPLU4MgjKLSJKSph1Awk2wXDofY3fb1M%2Fx9QVmIPu59xPUV%2B%2F8h4Xrr%2Bhsmx5ghx6SmIjA%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af929e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"7e4383543cdccc49d571519f9361ccae","sha1":"91a1225f674cb128b72beb88e60cf943d660532f","sha256":"0992f5868235a6371f2b829695cdaaaf84dc8cc1fc38bc41bf2aa6db56c2e1a3","sha512":"9b215a8696cccdd5fd5ee2b709807a9256a6fddd4ea35d1dce55c81217b05e867596e47cf6bdb26c338e8fb8e52e1248423fda11b85ebe6380b3e578e96f02cd","ssdeep":"768:emHPt23OJ4ktZb4FdNtrmLmtAZ/3d/IvlfB9dZKj75DBPaMMc3:emHPtrq2ZC0LmtAZ/NQtp9dZKjVDbMc3","tlshash":"eeb2e143f4a58c1abe2df8453b953cbab2b64d91eb52c27eb151407064d3cc8872b90f","first_seen":"2025-06-26T11:01:31.111146Z","last_seen":"2026-07-27T12:00:33.717515Z","times_seen":85,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xcbB7C0000aB88B473b1f5aFd9ef808440eed33Bf.webp","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xcbB7C0000aB88B473b1f5aFd9ef808440eed33Bf.webp HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/webp\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: W/\"69a9a06f-2222\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmADhJJk%2Fkvpk%2FWUl6KaF%2FPZ1Ac4w3KjnrFTsuSz%2Ffq0f89GTDJFmdk%2F6DZMpqxqJ8G9nDyCQdNh%2BSBiZ%2FpbnBTR35178VK4zsrZyAlrWqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfd09e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"124c154dd3c59b77423667fb221c8563","sha1":"96393bb05a7e2bddf415e8cd93e8b80a3621b200","sha256":"9eb5826c358e18e613c5bddc062c14f5f4e3f0a1a473d2819ab461fee66d8ee3","sha512":"9f7ec60758cf174ed3e14a2fe099508c2cf966e055393d32ff95e3febab017e4b3822c97b59e0d75cb7afc403ebf2e973cb83f6496e4ee792b17f7f4dd6630b2","ssdeep":"192:+INcWztYiBu6kRMOHgWjFZCu6Lr10JOxgcZF1Ih/RNvcqGVqb1EDE:+ccWqiBu6j4g6ZCj+J6gmU3kqNOE","tlshash":"cc02cead9ab20c1c61d4062d8814a207568a90db53b0539647639eebd0782fb6b7cc9f","first_seen":"2025-05-06T10:40:35.068757Z","last_seen":"2026-07-31T17:56:13.426894Z","times_seen":180,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xFa2B947eEc368f42195f24F36d2aF29f7c24CeC2.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xFa2B947eEc368f42195f24F36d2aF29f7c24CeC2.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 21172\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-52b4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP%2FfgoYZklfkLIjbvveTgUm6Vb4fL5aUHI2AazNCD8U1GHAIL59r%2BrzH7V2dMMHZl2O8HogvfKX3WSdx4V6tWJ5nesugOKtNnP%2B%2FhEWQwU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dfe49e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1bcd4ad397e5584364ff9968f8c24b05","sha1":"043dc5a9abc8c7ce97064ae3a65ce1ae843e5725","sha256":"50da85765466fb5e39beca9fc816f5e036cb53091cb95ab9114a4b27ce37a1c7","sha512":"c2e4ba4dc13c2d4524e4066bca26a2ae0b1b08a792f75acca642165126633de8e9a56aa1daec642a77f03405c6eedcf10d942df282aa78280fe9f3f66f50266b","ssdeep":"384:/rtJodW8aPBvnlK2HEm68+71YaZQWJZ3SQL1MD/UhN8lUyteV+TsulXPcCU:/rtJodW82jK+Em6jJDZCQ2D/OCZA+Nfo","tlshash":"5a92cfdab34f338e21795ae19424128cc21cde0a23d477d5d8f2a9b92dd1144dfe6b03","first_seen":"2025-07-08T13:14:10.602191Z","last_seen":"2026-07-28T20:03:14.57811Z","times_seen":53,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/telosc.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /telosc.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lXppaOLquap8SGJxbwNgU9QTYdQzn8RrHSPayMvZfxliy3I2b4Cnu4UGE4XyOQ1w1CAxrxeGVsAt4%2FZ3Lxzx42WnrzSwCj1OcdVDsLnKcOI%3D\"}]}\r\netag: W/\"69a9a06f-16e\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81e81c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"493b7389fda476010dc908e8d2db47e1","sha1":"8909d9bb7abdc16b9a05949b80e2f0fe474a73eb","sha256":"c6be3e104d3b00a1a41178557c002a1c42946da8bec062c506de2eb735e227e7","sha512":"442689be16536d666b6e2715b323cb3b162cd2637af6498dc0be0294ac7a9ab59425b84d6753bd00d7324b48e4a67376839473115407b76ca1b173836b0becf5","ssdeep":"","tlshash":"59e0d8952ad45cc5439986b86e3febd530278485a684455ca2412725e4915a258047f4","first_seen":"2026-03-05T21:32:49.987228Z","last_seen":"2026-03-05T21:32:49.987228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x90D2af7d622ca3141efA4d8f1F24d86E5974Cc8F.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x90D2af7d622ca3141efA4d8f1F24d86E5974Cc8F.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wl4XUNQSdsMT6IXjnQuuIBSM6WgFzqOCYoq5MgJGOZu18h8cgotQN2rOABCte5MF7W%2F%2FKwsM%2FOpbuO0JD5w8um48p%2BotKPogEE921RFH1Rs%3D\"}]}\r\netag: W/\"69a9a06e-11fda\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f82e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e653749f0ba0edeb928964d1dedc50f4","sha1":"2566e6d02d6523ee7ada42b04992ea0de158ee3d","sha256":"b83776d82dde6c6641bd86e01b3691193e79ca08a19d4bbf3a52e741bd7d3b22","sha512":"f032cc354b765ffbfeb252e196fb3c69f51fa8cb63959268d1c5c969bd2c17e73ce19c406656eb9a75f1177ab24114627567445810763e373cf87b41ed6c45df","ssdeep":"1536:WYNQfWN4ju90YCXQwdxYXsGVWWVHLxAovr8meRutDoVUZI6AAldWT:fGeujpdXQ+G1VWWVrjjDeqDoVUW1oe","tlshash":"3e7301f5c227cace844a43890be96f1f4d1910baae8645cd4289b66d2db746c13f3d86","first_seen":"2025-08-15T04:03:18.689257Z","last_seen":"2026-03-05T21:32:49.988074Z","times_seen":5,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x928FB6ED39100a92B2480f5cbB93453f98D9F4cE.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x928FB6ED39100a92B2480f5cbB93453f98D9F4cE.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSUPJEEppXgzzRpxO9HuTsdeOuxofmoqHqdeSIyQy%2F95V9VOazVmzDGdnPLS826BrUJBpsw27clfsHUntOWowuj6L4qKR8WBP8M8GZG8iFc%3D\"}]}\r\netag: W/\"69a9a06e-60e\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f8389e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87baa24b9eecb170e949cc67f9d1550e","sha1":"37255f6a0d0ad4a3d58602266a4df191ba94dc67","sha256":"a2b01c4732f83954acf1eb0530682c553d89689fff34402215defb04d73bb911","sha512":"9c0937fa549824fb9700e6c6388983f5b3c9f8401fd1627a0e765b7c2b3451a86bcda561b3f4a5707866aff3c23718a666785e0e05dcc575be8561bd5979eecb","ssdeep":"","tlshash":"f23153d1473810dcb8d6574dfe6b72ce265a30f6172349e890ecaa7490d2ec07803568","first_seen":"2025-10-14T15:09:28.053434Z","last_seen":"2026-03-05T21:32:49.989469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x1Fb3C5c35D95F48e48FFC8e36bCCe5CB5f29F57c.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x1Fb3C5c35D95F48e48FFC8e36bCCe5CB5f29F57c.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfCKuqHFdPJyexIPn6jkZ5MmMzmxziOjJqbR%2Bhy7tsG%2Fp%2BpFYszkhKhf4I06l15TGYjMNbIzpG5kjKullMSeRNVCrCOu2s44tCGJ3T9PSI8%3D\"}]}\r\netag: W/\"69a9a06e-8ba\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b8208429e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff6be9c83c13f47446d94db296857fb4","sha1":"43a51141f2ea3eebd403848de457531e9ad9ecb9","sha256":"81d8f257878be062dfd9048cea3eec4e290d5bf5c9ddff639bc95b218892b4d5","sha512":"d96228676b67c8cf68b4ff08e649d92a35e4b1bf7d8df5d0a8a827adc50f05c90437b8d8a5063597d65ab2d3a37b0a4ceda9f2a7dd8bf789d2275e8f8bc8a7e8","ssdeep":"","tlshash":"ba4184f24374a51c768e439cdfbb7cc8302b31ee911a81e4a0596e38d6c398d3a48e15","first_seen":"2025-11-25T08:47:26.466495Z","last_seen":"2026-03-05T21:32:49.990634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x23E60d1488525bf4685f53b3aa8E676c30321066.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x23E60d1488525bf4685f53b3aa8E676c30321066.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 36976\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-9070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BT0riVu%2BwOLCQ4zX7cnVp2gA%2FHZtQbFw5tZu6M6LfiN4rnPmkAPAs1QVqQQFwUq34GehFowtYved%2F3E6EzLCpTtpGCQP3QLil%2Bu%2BTsEi76I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b82185f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"425169ed6c7f2db6b6163a3f74405813","sha1":"b125e9290bed46fe19985f228812d41bacffce41","sha256":"d54a2f7b8c5fa4bfdc4580c898059db8b5cf80411d657a9646ae36c784c27d8b","sha512":"45f923a7709424241c05c7a37491e61105f7b0fb0c78e6be2824727c3558670f30a25621cb30f0ee9c6d6321e5c787d5922fa2cb1fe0314eca9c43e3f5e241f3","ssdeep":"768:tSsOMZ61Bsvn8uBKtCK2RPI2g3FAqCRtQozfcSR4BHdLcJlWhQePLU3rC9:7cfsvnn80LRPIHCRtZcSRZrwQePL1","tlshash":"7ef201af883b40c745168a51d09438e9c0f1b75732884ba0a3ef133789d6d1169da1ee","first_seen":"2026-03-05T21:32:49.978915Z","last_seen":"2026-03-05T21:32:49.978915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x8236a87084f8B84306f72007F36F2618A5634494.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x8236a87084f8B84306f72007F36F2618A5634494.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 22816\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-5920\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCutAXW%2BU2EHjRmLTy1HS48Nfi4mL4TL%2BwMQD5I3dlPI%2BJJ0M6Vjb9DeYNVzb37w4CjRVfoZ7BfW7kBpPKvtHqk2PYS6zNL7QXwImMSEP3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfd49e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"c16533d25f98250fea72ea2b9203b6ab","sha1":"7b8349cbe93728607a77659c3188c83cb26c0dc0","sha256":"3a3d55993b7551931a8c89a5926caf4f7e396a272985d244fbd3e8d79a3e4ccf","sha512":"969a737a2cc78cf9f486286c52597b972fc9662e69dd29851fe71a2cb2a5b794249feb34ce25ca6aa2475638fecc67cb7ddd57be014c512bf82bcff9a6dd6710","ssdeep":"384:swk3G9mehl0gqJ4+ZIQCNOi9IaVQVKfnXPFXFpEuYROqdG3nI/zhS0fBysPvM:sRG9N85mRyarF1pEuYRzG3IVSAxPE","tlshash":"9ba2e1dc0e289ae94a4063844eeb290a5563747453b43b74b2feefc510c0d9ec6771de","first_seen":"2025-07-08T13:14:10.580589Z","last_seen":"2026-07-27T12:00:33.540717Z","times_seen":52,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/ethena.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /ethena.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9414\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-24c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WyyhKKAMyFKrJ9LYD%2F320T6GZItYa3Rb5Yy4suWn7%2FmE%2FhPZcbOY9tbSz5itcVPOJGLrWziZ9%2BEpQXX2bLwYys4jVF7x4VXSK8KHvZUpg4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfd59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced","md5":"cb7c8fdf7bcf213b4aaf97b07710e17c","sha1":"158f87a3e598b29e28a2bd11f223caf74be34f61","sha256":"3fb1df2f7c0035af794254352c63b1226ec54b800f563af3a7803b1ad43fa11e","sha512":"3ba0308a162776c479205b9febab064165476557b06a11d866a44bf0227a284df81b99292b776e866aa722618162ae8bac18f8937982a3e337e60608aa228349","ssdeep":"192:MNebX1ZZqqCcICKotPrxP6I4wM3WKFT0k8qu9IF6+JrlJeyioStD8D:Z73ZHGpkr493WKVx3IjurzejoStYD","tlshash":"0f12afe1c20a413ec60ac1bf9933b3b97cd9d1fb267170a5e949c0877cd5952200d2ca","first_seen":"2026-03-05T21:32:49.992298Z","last_seen":"2026-03-05T21:32:49.992298Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xeC3b5e45dD278d5AB9CDB31754B54DB314e9D52a.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xeC3b5e45dD278d5AB9CDB31754B54DB314e9D52a.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26jELdlzNkjGdz0CV3XPGsxx7m2vv980eV7IUrW9RupXBA5WPf4l47WzNsBVOYbrIRjxButYHrgpWr8Azves4yS881M2Lr4k37wdmYs8Q8U%3D\"}]}\r\netag: W/\"69a9a06e-89b\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81dfeb9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2203,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1993a0972931357c7f075a90889c8192","sha1":"4ae1bc60bd7809c393dc3e74ada7556bcbad2bec","sha256":"a9a3a18d8237915ff47c3d58d835d941dc7fc1cf4e840eeaa1e13545ccc45d12","sha512":"fc31bd67897ee5acfd7df4bc74f0c33f5c286bd0be84767dccf6a3ff4bc314cbcce6c035dac0d7595475ea5b7b8d0258954d0c752fbbfc6e579b46783fb02666","ssdeep":"","tlshash":"4641b7fce338e24c9c84e21defb2b0e0532eb0b4346155d5ea9f8724b087589f246d44","first_seen":"2026-03-05T21:32:49.994011Z","last_seen":"2026-03-05T21:32:49.994011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/ethfi.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /ethfi.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 32050\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-7d32\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KeyavT2LrQ%2F7vHQrSssAnBGg1NID99vE8YOHUj4vVSezaFeFmciThmIooMM3XnZLPha3yPP2CMbneM3NKYjUhJnY1WHyfT2TGsKLrKGjC9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dff39e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"5741aa68aa55a57751f520c7388fffff","sha1":"5c858654da7e0ab4f448279d508efa2c650cb55a","sha256":"364d302ecc8403346de9577dd924f5cf75e2a1e406dc98f1fdb4de7c60a46f7e","sha512":"7cca41106d697600d6d7ee533344125237227ed8420d812c5a5ba91195ab8e9b52d8baba36039fd92a9a72d8335139438ad60bef68c02d880124bde4f9892708","ssdeep":"768:2AUCpEb3um5Wlvr79R1QMzMhHK13w57eydv1Vl2:2DFum5WBZPQmYK1pyjS","tlshash":"74e2f1624b306d55f178d62ddaaec3decd03bcb852548ab603d644ef2718689db2212f","first_seen":"2026-03-05T21:32:49.994888Z","last_seen":"2026-03-05T21:32:49.994888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x5b1578E2604B91bd7b24F86F0E5EF6C024bB3a14.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x5b1578E2604B91bd7b24F86F0E5EF6C024bB3a14.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 23582\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-5c1e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xamqcrcRnARCFXgBEKU13QNd1g3A0zkCTKH4DRsK%2F8Q1mcDGPnC86oEOlBTsCO4d6%2FGvuW44HYAmQAOhv%2FNgx7OFwtEwakeBN75uGwkRWzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81d8039e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8b5aac4e8ba9e9c653145954be78ee69","sha1":"b44f53b48bad4b5bcb027b689316b65a1d1e98be","sha256":"1b8a74127e1cb794c47c36808bb5f8e7a7cd6b5a10ff990e217be2495465c2c8","sha512":"30cedfc33a5bce22ca544690e80ebd6b132010d842575d949adf9f737e6d39a8c148471fa091d383cf19d347c7e6dc4cc538c78141793bb2d2216d19daf7db14","ssdeep":"384:SZ/6mmr6tw7yTarFH+Ap5xjOvIQ7TSDnTVyoWlxnp5RjDUz2aL38tquwutLzqktH:CU6tw7yTarUSxivIWEnTVytxp7iBz4vt","tlshash":"01b2e0ad0d55bde945f7fb8cc00bad60f9c4768fa835fda80454f69eba42b4b019908c","first_seen":"2026-03-05T21:32:49.976282Z","last_seen":"2026-03-05T21:32:49.976282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x1Ff893C9071d04F8A965a90FcB0de22406A3eEaa.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x1Ff893C9071d04F8A965a90FcB0de22406A3eEaa.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDYN1yHYoi4HuPBZeif7ksm9vPnE1X%2BgSnJZN8H5RSEv%2Fy7CeAAhTG%2FW2aOhUPEBe7gygjNHW3AwgQ1wZo%2FMRO0RX6aQYoRezzDyg4ljJK0%3D\"}]}\r\netag: W/\"69a9a06e-7a8\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81e81b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1960,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c714b0ba5f24a41fa970bf50f1c5620","sha1":"f92a62824d46fab8ea6cad6a40074157b8c06086","sha256":"cf5795363cb1069bbb6412afddcfe7f29e98f611d959b84df23bf36ea2236eee","sha512":"71110dd03467b4169357a93ecba6ad7e5e786414079302006f7dfbf314c889b5384a8d4552f4d4609ec6695ef518ea949af445fee401e903bf67450913d98aeb","ssdeep":"","tlshash":"524174943362f3e5e55af3f89731eabaf51631ed2a11813ac3d30d0859021ad995d4c6","first_seen":"2026-03-05T21:32:49.995814Z","last_seen":"2026-03-05T21:32:49.995814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xfCeEB7586bab730fA400A5BF3FcF298d0DB4c7e7.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xfCeEB7586bab730fA400A5BF3FcF298d0DB4c7e7.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBFt0foxT5%2FXrklHlgE8QlPP0tYgqZ9dTGjgEvdsskGdFpVwmGa3dabfJiyB%2F4B%2B37njGpwxEAc0ZpHllSoYMTgG6eMPvX7U2QEHBlnCueY%3D\"}]}\r\netag: W/\"69a9a06e-e40\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b82185a9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"795a3eff2dce93c66c4f1adef13ea3f4","sha1":"721a1adb41bd6bfd3481b12df92ce7594ac240a0","sha256":"2672f54018d8a8b5c0952da2d428cf3434d6d0ede395a514c2d66c5176a7a03f","sha512":"f4f6553d0ee7f9325d3814fb910125724d9bca5e42b122e5d23218371c885c33b38e2236d9ca8922c106db313941bced87607eb25ed7d90a1afa1c10c622a0e0","ssdeep":"","tlshash":"fc712e6ef348893cb4112778cb01727411760ff6a287b659c9b36032d9e512e1a7fad7","first_seen":"2026-03-05T21:32:49.996587Z","last_seen":"2026-03-05T21:32:49.996587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/logo.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:18.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:18 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHxveWGvui0I7UUOkPrX84YUNUha7s5E9LUS907%2Bvw%2F%2B7JZ4FHRV2%2FJruvykFWyvB6aaz0MY5nqRnJcsl%2Fl3LnZ1ZTTlZzfjqqgnUJtse0E%3D\"}]}\r\netag: W/\"69a9a06f-3ab\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b872f0b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"922335c83067453c95f5fe83e654d0b8","sha1":"7124c19d3336af38bb62a664ddb4939f7ed215e6","sha256":"18bcda86e87c440133c2a7e9811b220ed244e1fa917397127426375eeb072b40","sha512":"3d954a1f55bb476f9008b9cfcdf92800192ed30da6938b9fa1623381ecf736c87de665bb411edf76a8e05e3d20de2e959f9238c5520e277750ac700f7b82acd7","ssdeep":"","tlshash":"34119b66cb89a7148a4cc252fe2c303bd02b1ddce60f35cc52809b4cb36eb8b5518d44","first_seen":"2026-03-05T21:32:49.997513Z","last_seen":"2026-03-05T21:32:49.997513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x4c9EDD5852cd905f086C759E8383e09bff1E68B3.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x4c9EDD5852cd905f086C759E8383e09bff1E68B3.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 20371\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-4f93\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPlhnuTzHiuw7YWerQkT2F%2BuTVvu3sSvIQU3u9FwQYtWAXWkTytUeozj3OqqpcmBtiRB1xaQJGQDqtGxdXvj2WfHOUK4kY7wllwgkIFwBYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af889e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"e9f6d2d824f01a2a94122d1ad858e5ea","sha1":"196164ed6d018df20de9f6ef8b0ebaae73488dec","sha256":"1d707231c854ebefa980cc7c594dabc838e2558ba5a4c08d02fc8d9d5ef62328","sha512":"a2b66faf89f5614305d39d0104b9d845260f24176f4fb0c7f9fbfd0bfbd5c3e16519bf9c319b50c6391c1fbe3256c79bbde20147b5eb928e3bbadd7f4db94146","ssdeep":"384:QQhxUNLw2yjwOZBCaZ6jT3EgdX6Cj1qi/DBuYl8ZjD9H+iPE:oZojBbf6n3BdKeqitJl8ZjDM","tlshash":"4192e0fe006b260acf8f9a620cf6111ff52bf2379f57132b8c9cda590645a9054b365e","first_seen":"2025-05-17T19:12:50.351436Z","last_seen":"2026-07-29T18:00:43.774897Z","times_seen":151,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/kernel.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /kernel.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-434\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wLFrICUmDEEI1Ot%2FoleJg0WrJeO5mZ2VaCibHJ0NyBxbFQ%2BOsD4SZ60sq9Qq%2FUncSRqW51AqVIWFd45pjm4xTCMN4QupVuO685aNW%2Bzy38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dfff9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 116 x 116, 8-bit/color RGB, non-interlaced","md5":"04f06ff79cd04b6f0ccc0fb1f809f26c","sha1":"6bca27f9c48a0612c54526b9409172a3e8e0acac","sha256":"64fd0519ef9003dcdb9a1a33c90074cd15a80e8954c0ab14fb98b4ea043856f2","sha512":"ed1908f140ceb0e4c56c47217d234df6db63371a57129e1d01ca542148b18153519606c9ea08aa4f2202b1cac2758be0e07b27a320a6e6d7af8457b7ac918d5d","ssdeep":"","tlshash":"3911dc12c9f094bdd9c41d3124103ad4ce387551ec347488a15cc95d375d7e87d452f7","first_seen":"2026-03-05T21:32:49.999395Z","last_seen":"2026-03-05T21:32:49.999395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xD9A442856C234a39a81a089C06451EBAa4306a72.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xD9A442856C234a39a81a089C06451EBAa4306a72.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 76010\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-128ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I8bKa3gBJw7wrJ0pivrXTs3DHUNcMiCfESqojGnm3%2BDLsMbwuR%2Beol00kt0mOAVHdo3d3CUJy1%2F4oQvq7CKJLLil49ZtCmu6wMFvfUOoSoo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e8249e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"9d7155bcc3057a871af4abef505e5960","sha1":"d725f55ef26fc615b045c3b002c09a603cefc8b8","sha256":"42971ce891feae5a4472b396ebde87b398055a199d20d26fea89c446276ad0ac","sha512":"1b41d6723efb4a53e8f5725f848d462123790e3250cd0d3a9ed860e39357c9b793aa528bc5169ab225a70e0d80e61cccdbad94f4f38e8b86856974a8c3a2dbe5","ssdeep":"1536:of2BaG6MeOqdOKe39pa778Hp7AJzROTgxwj/VPpfXMgcblEhP+/BIP:oaaG6I4OZ9ps8NAJljwn8gS8+/e","tlshash":"c67302bd02d5cbce094178ec3dc27a5c0c52df3c67c9265190a699fe2948f6805e8fda","first_seen":"2025-07-09T15:21:18.494875Z","last_seen":"2026-03-05T21:32:50.000251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/caps_w_square.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /caps_w_square.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FAtFHDoi6oDonJ4zq4ziMiCgwiut5Ha%2BWoFNer2s3eiuVV8D1L%2FtlkHFucZpcZSgvXcKLyK0JgM0HuV2PJl5H0enrcSHWGbNn63FGb%2BfcI%3D\"}]}\r\netag: W/\"69a9a06f-3351\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b8218609e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"292af841eabd336e40fc00bae8e3dbfd","sha1":"4f8b33db1371d663111e376d43f499da9afe4d3f","sha256":"c5b49e209c74a43db18081b2c6100d6ccbeec63b6f8b17d258d27a684d84744c","sha512":"15c874d669fabb6c11b92120588b897c637936a4a0e3be675f04b0d2e00bb47bbe9cd500d3a0a0eaaa3d9e72a6d397ac6e7259ae9f7ae64627e29ea0aeec3d33","ssdeep":"192:pgSpfuYNT7Rv/1nmwjIQHSby6p/eingNSUfyIbPHqI2y5BrrggIWNGuqGkwwb8uz:FfltVNmwEWSbyt7yG5vwZtIupIqx","tlshash":"c74294cd2f748ec449cc9bdb7f2260dcbe0bd5a69d8a8d44d05d5f5904c382eaa0ac93","first_seen":"2026-03-05T21:32:50.001217Z","last_seen":"2026-03-05T21:32:50.001217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x271C616157e69A43B4977412A64183Cf110Edf16.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x271C616157e69A43B4977412A64183Cf110Edf16.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 25404\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-633c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1JQajPIQ3FVHMDs6iDqhOd3QZ%2BIYLO2xe5lQP7spFmBRvaSjDPQCgwPvMzOzIOvTKc2yl5Bv0UzVAvpE9N5Lr9n%2F4LqljPkS1cxoRLJeLE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dff09e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e7ddd1b4d3adcb4788f4049cab20757c","sha1":"6f9b9543e607263fd6454e0d3bffd2bea92b0a66","sha256":"cba47a2cbb0c504a1fff650b5f7a8ba9e73cbcb81f7063f98c6b47030bc5b8b2","sha512":"d03caf8453775c104fb9be9ab1333c206f61221789aa336293b5d7fa1ac276038ff84e0f37c7a760aff6f717445166b589beb614745f5eed06133a067921a206","ssdeep":"768:SZOx59BkMXq8tOd/cV534wJSmSAHyOxDh5Ve8:Sc59XNOd/cVHSmd15Ve8","tlshash":"b4b2f1da45d7a9ca2ec3daf8d4a870b530bc5f7e6d12f15dc208f243d636b221449e19","first_seen":"2026-03-05T21:32:50.001933Z","last_seen":"2026-03-05T21:32:50.001933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/97b781381ec650eb.css","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /97b781381ec650eb.css HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: W/\"69a9a06f-15a6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YX%2F1em2OunbehxNwpwrAK0pkXsRiztglNJD951zCCVO9wPzhmJe%2FARyFTMoxRjxCvkSUYxU3GgO11Pt5RK7H%2Fr8KjbiA9LdEd4UYSxdbLk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f6e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e6ad316f0930bee0461663931060d2ba","sha1":"f3bf7b8731f1c47761d49cd6b9996ce713f278da","sha256":"4c14efdba3dbf8871bad987d191394a8534a4eda90bd7e058e40872d0aca48e5","sha512":"1752ea577b0c22f6416f6a39191f777dea105bc2090f8c9f2869a42e9eaa4bfd509a4381ebb1eaa8a66e501b11e38494667e941833865d4c1f9c59c2b0a7dbd4","ssdeep":"1536:Ub7pjaQN0ZPsoGxWGCtZhR4aAn7F6xOjMaYEmB3cUG4IDqXi7XNU1lLOfbldTXnZ:Ub7pjaQePsoGxWGCtZhR4aAn7F6xOjM4","tlshash":"fc83a6a4f225d97fbc37a47d536cf40c611ab182de264be9fe11b21246c37fa58a3214","first_seen":"2026-03-05T21:32:50.002698Z","last_seen":"2026-03-05T21:32:50.002698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x35D8949372D46B7a3D5A56006AE77B215fc69bC0.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x35D8949372D46B7a3D5A56006AE77B215fc69bC0.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 84482\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-14a02\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3i0iYrDnvVaQTRDd7J%2B6zbiOvrSKVFlgGSDr%2BUOofaLn1Laeu8xV7jMJF2TAEGmeJHXbI1mOy4CkuCZn0tqlg62qv0dm5xqakVownqm%2Fv6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af979e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"abdaeb48f6ebf572a3ee59a76059c5a6","sha1":"942a0adef2cd8b3a37bf08fbe03705ff77f8c4f1","sha256":"87aa284f6ac67b2f8573117a01d3e10545f450df4664a9463b97b573958f1020","sha512":"78c3251fbe9db4c5e72a921d5298810dbd9f3181373ec0c3f0ca2947935f30552a3bfed042e5c4f589a67787e0e03d2d1069baa0e39656fe6c61f636731fd7e0","ssdeep":"1536:UP+nOjtGUbN2Q1O0gS4QDQVs2OCjXD6t8cm3Dv8HzDWNNq/m3BVr9pG:0+n7dQ8ZRhFD6tvqvGzyNgexN2","tlshash":"308302c80662f64b44bf23935e85f7286acc1c4b668fb524df52e4dcb60286fd147ca6","first_seen":"2026-03-05T21:32:50.003611Z","last_seen":"2026-03-05T21:32:50.003611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/gauntlet.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /gauntlet.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WL2%2FMEozuIbHOPZReK8sIz92uEHnRWsK7p4rSbj%2FSxRe%2Fxl3qW9FJD3upBVuQgrTvhz6TPt6Iu%2BfI0y64JbNYjFHkl1dlDWgOqAdb1EAY8%3D\"}]}\r\netag: W/\"69a9a06f-1df\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81afa19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c54b97aa00dc0ffebda76377bf1e4295","sha1":"330b4aed22f63a022bdb2bcfa608c878c8540e6a","sha256":"44ce32e7df9ec5466a33a8a68e61f5e6ad9b97c6cd86c176687b276ed138b387","sha512":"163f2bc1b54f6a3fa662a9f51b915d3e2354386075392e2fca7e26edf78e5979daecbeceb7b79fe007b86283839198b8b5950a0edbbe95287893d32cde058d44","ssdeep":"","tlshash":"23f055d0ac430a55a90042f6c6bc6d42b12f13c9b3c8cca8f9b81d422408abe40f42cf","first_seen":"2026-03-05T21:32:50.004409Z","last_seen":"2026-03-05T21:32:50.004409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xa3931d71877C0E7a3148CB7Eb4463524FEc27fbD.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xa3931d71877C0E7a3148CB7Eb4463524FEc27fbD.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 38805\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-9795\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=La4qdDhUNj1VtQ5zPPNePIkmUGjcwh2Jo%2FbDF5OPaNMK4%2FxMfalX3rwuPq%2FW2uPL0kzDXItVupLyBEYbsUZT4NOdswetN82iw5XWYRtM%2FgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfc69e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f48ae8edc67394c5fb4c47ed39db5043","sha1":"40efa5473144918058fdc1076a0a06736779987c","sha256":"80b30ab043050bed474508c58c3b707c96ecf7f1403a883c2cc5eba18eda2b72","sha512":"80e017be7c2fb6a0ad3884aa5f50d745df9227c0f79fe19a712eb7368cdc4b78be94c424d2d18e1576b585afdf845d424115296c7d9182c140bcf1e3c24443a2","ssdeep":"768:SI2jS9oC8RqzVzxs31dIfiww58psLDOWNKAL3PrUKskNK:vMC8Az5C3jnV58p+OWoOAKsX","tlshash":"fe03f115b2a665dcaf91e03382e55bcf1e43f48bd2b6a33d3e00643f68a4d1d109a661","first_seen":"2025-05-06T10:40:35.127741Z","last_seen":"2026-07-27T12:00:33.723418Z","times_seen":60,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xc8CF6D7991f15525488b2A83Df53468D682Ba4B0.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xc8CF6D7991f15525488b2A83Df53468D682Ba4B0.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nH2NTdySxTn8Fqn8Wz61kNqFlw3pmovCgjIGM%2FHJfQLOq1z2aHvrdA7kEE0IzJryiFbbmDlBA%2FgdcA%2BiUJCfAfuj37Cgr2OzIlQj7DN2Dxk%3D\"}]}\r\netag: W/\"69a9a06e-bf6\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81dfe59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3062,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27fc21986dea327982cd1828e790413f","sha1":"68689f888450fd56aee518bafe80422a47a3066c","sha256":"602c7cf0d7f7d84593e1f4a2aadd3da5f0e9bdbea9646df816fef25f853cfa27","sha512":"ce3e062b63cb68fe736cfe713ad512cd38aa387ab3e44594f94fa82a6d7d9aa56ce34baf65f4faf7ec818b35a7738a7e69e39ecf93f4b90af9b63264a7a3bdd9","ssdeep":"","tlshash":"f05186c1377857f8f105b2aa023765f43e8a20ca7953d0bcd3a02e76e9460559ed19db","first_seen":"2026-03-05T21:32:50.006129Z","last_seen":"2026-03-05T21:32:50.006129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x8CfEd6A728017A8641a213Bd9E2Ea6183dE275E8.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x8CfEd6A728017A8641a213Bd9E2Ea6183dE275E8.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tySSAJhzW0%2FafEGXHb6KqnHp1pska%2BgnjQQUk4kaD%2FmR5s%2BpuKHu05OASqzhRZhMUd3Bx7gt6VxKLXUFVdXK16yp58UqAUKMy%2FA9x12x9rE%3D\"}]}\r\netag: W/\"69a9a06e-55f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81dfe69e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"309645a3be13451a1b57dd5d2f99e102","sha1":"352c4b62218a2b91a5203ff6c5dfac87741f82d7","sha256":"2c09d22e6a0b2bb0aa444ed029351df8baf2527a865da88d49e7868590f54c96","sha512":"cb590acfc437f64d5cbdcff22c2873c7ad7228d970006207e9822494049cd84091a4678ebdec3da6b37cbecec2a7f89d328195acd5ec63c40f51af67debe660b","ssdeep":"","tlshash":"7d211c74d16ca87da609c30cd3a3b5c0233d109ee287e2a8670c5f3e90254a9bd67bb4","first_seen":"2026-03-05T21:32:50.006971Z","last_seen":"2026-03-05T21:32:50.006971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/image.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:18.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-277\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLvXW%2BO1NA5gX5lgxIVmuHc%2B1BpTFBhydrs2%2FiXUvA2jfVtNE3GZWNRgt1nxFliXKIvl0bmHve38rZ5G4MweptnOTntHbM9QtSGxZP22%2F%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b872f129e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"b4ef83c482428a9ee6d6c79aa62edb87","sha1":"8413f090cb16f1838bee6cf1f4de0e1095858f2e","sha256":"941803f45e7428b5ff75966a4ac38132dfa1f23806787af78ab56295b6aca4ea","sha512":"cbb0a06fb235c3df8ceb8f19d3e8df511ef7af65a471cda2f25afe78bbd75d666bd392e0b653682f2f9cffb64719fdbec2cca4bbb94e63670c3ba616190e3340","ssdeep":"","tlshash":"4df0c2d622308c3b80cc0e30ca22d21df86c0aecfec34006713cb036b62262eba83350","first_seen":"2026-03-05T21:32:50.007754Z","last_seen":"2026-03-05T21:32:50.007754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 62737\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-f511\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyLVof6rXluQdq5FRTclu52wzGhIG0L7AEi8ukDUogF%2B6WcAoCcvxaCc6%2BTEcBcut33okbz0s9jasO24EoCK73EqtN18aA2qbIM36n2oOTw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfd19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"acea503241f6c55548e458e71dbab192","sha1":"459756e39556b2efe47ab348dad5925b7e47a073","sha256":"5b8ec23d8f953f38e943b4412e4d288aa31336a2ad8220ec157febee815a1111","sha512":"eab2dcf099712a0851076700ae664a927fb169004fe4bf5744217aa1408f536761258b86e9f5e9cfffebf5a7b7fdfeb78cb43153165e7d5a1563a6887e000a39","ssdeep":"1536:rrzxuV2hOVIJy+VzScP1ZNh8Vf7cqkq86Iv+eI3y2H45:rQ4hEIy+Vztfhwn86Iv+NN45","tlshash":"125302729fc1d4f111ce1b809f9498fc0d997596c5ae1be2c2fba9a6e00a7fb40158b4","first_seen":"2025-04-06T10:35:33.746692Z","last_seen":"2026-07-21T06:12:37.716677Z","times_seen":159,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xD11c452fc99cF405034ee446803b6F6c1F6d5ED8.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xD11c452fc99cF405034ee446803b6F6c1F6d5ED8.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9992\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-2708\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXlLHBaL%2FDVi3mFdN2VaRrrTA%2BZxu2%2BOMrT4iwvIlDSu3dUn5w%2F4cWtyqzOFCoKM6Nx5o42vjLXOVv66H2PuV3OhuIjepIkGUyCiSpeSeeA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81afa49e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"4eaa5e5318a243c6facb285ba3146448","sha1":"fe1652fb299b64994a55fa2e195a89c5431c92d5","sha256":"a8d9704c71729b848b39e34f9b39f2b45ebfa460c83fa36cd64342ad669885dd","sha512":"dcf11d9c06555f2720e75ab20651c97a2be1386b153283e1d04318f160cfdddf8e3a66cd840d204bb437586ec3c3736229553035a2051c3ed580322bc405cd31","ssdeep":"192:u40v2NlnM5k0zfBGifyglLtSjmsGx3SLuW0SUpxxfIF3WPDKlA5Wdw0GNab:L0v2/nILBZhAux3guW0SExxgp8DyUTBi","tlshash":"4722a171a1009df5ce75bb993346041ed5d43a15657b588a37667cc5e800dbccce6337","first_seen":"2026-03-05T21:32:50.009689Z","last_seen":"2026-03-05T21:32:50.009689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xbf5495Efe5DB9ce00f80364C8B423567e58d2110.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xbf5495Efe5DB9ce00f80364C8B423567e58d2110.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 19920\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-4dd0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuSFharWkpiS%2BLM6tlfS9XIC3014ILeWxTunS4FhMwZdiaGvHkzcrcJsLjEFgOuC%2F6pnuoG5nLXuhdJjmv4TwJGMRyCtpyC9d3KJDgN3waA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfaa9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"66de75b87ae42b1a511b4077ea7f625d","sha1":"71555d144a7c64feb452077cc35181c44d8e0a9e","sha256":"6c06ea45849356340455bb142af94afc174dc64145db4c83a13138ec95ce4be1","sha512":"6670fc7ea29da733f4d1128660f54538779dbeac48325e1c6bc92ee23afd2500eae6d93d14de2a9151c91f8d88bd8bea85de340ec6dd60e67533f9b1e400a817","ssdeep":"384:JvTit/I6/g/WXkQ1k7F8dZMiPcQY4FmXwiul5Gw:FTitNOW1WF0ZRcV4FBAw","tlshash":"3e92c0fd10f1e8aa1a2b495193ae3105eb5be483d63798f9ab703a3e0d807c186547d6","first_seen":"2025-07-05T16:50:07.583146Z","last_seen":"2026-07-23T06:21:09.918306Z","times_seen":48,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x8292Bb45bf1Ee4d140127049757C2E0fF06317eD.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x8292Bb45bf1Ee4d140127049757C2E0fF06317eD.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 12152\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-2f78\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMLlU04OhydNnXmf%2Bvn6BSjFhaEoKlcVfpv7%2BmTiEvELuw3tNSupJdxO5UWKBfZr2qdo2XO%2F5HSzDAojkAzcJi75oz3UUEVtFin%2FtGlaA3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af939e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"ef8273ba7da771f9c27835d511db6729","sha1":"d614c6ef54f0d25d74fff3d8fc726c1d1863a3c8","sha256":"ac61a8bf2a6402dc5eaab072a7c2180c5e7257716cfeaa458eb3ed923dcac841","sha512":"1aa08cda2d7e11bfb72d8e74bbcee6e3af1a48bf8cca4379373d0c00932efc4aeeb23f9b105f41857be1e8c0e2067cd8391d0e39de90cf80d8e17467ec63ef87","ssdeep":"192:nmhgmT/qCtSiRrSWEftSinNwjqWfs+5lc8eSmoMP5dM04tbrSDaFyGzcHWLgKjW/:m/T/Ttpr7Vin+fv/eXRP5604t/yagvK0","tlshash":"0542c0c8d6a59e0e97d04e1df6568bc4c0b5964b4e93102f220fb6ee1b02078bddb1b6","first_seen":"2025-07-08T13:14:10.530902Z","last_seen":"2026-07-28T20:03:14.624043Z","times_seen":56,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xe6A934089BBEe34F832060CE98848359883749B3.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xe6A934089BBEe34F832060CE98848359883749B3.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmNdNCHvSDflDsVlDQ7zvJ1mYsHWm6K5h%2BhTjxicXBbjqFfdjy3id1YpyO7EfLYajiylhiODEbUED4Q%2FCbY7SlzWdzRAy%2BWVD4vPuW7wB5s%3D\"}]}\r\netag: W/\"69a9a06f-93f\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81af969e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f6e4914f80c2663ed82855e2a50cab4","sha1":"e352edf02eaf8f0ca375da85948f698a70ab3bf1","sha256":"f4d4052009821c6841948a05001f5a0467e0eb06b3e53a1617df0e3b0e916ec3","sha512":"be6092e14563aeb432ed97e588846683ffc924da597cbba6aef3795dfc7bd77a88f1ac68382d55e9f326ff812e76c999df6c6d34a63378d221f7d855408ed26f","ssdeep":"","tlshash":"50419552a3d8f1f8e48acbb0c21564f7787f06faad12ce8d03e7ae619b8015d484c8d0","first_seen":"2025-06-09T10:46:44.950559Z","last_seen":"2026-05-18T19:43:40.518908Z","times_seen":10,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x9Bf45ab47747F4B4dD09B3C2c73953484b4eB375.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x9Bf45ab47747F4B4dD09B3C2c73953484b4eB375.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIJ%2BHVmm5akxoYjNFd51%2Bz9qCd3hKUkyS5TtcUOnFfLWYo8cqdgXDooB9jfyPJAFobyaRHbdpv8wT6oU6QMeC2XzntYvjTugZ57rX3EU8Lo%3D\"}]}\r\netag: W/\"69a9a06e-8ba\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f8359e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff6be9c83c13f47446d94db296857fb4","sha1":"43a51141f2ea3eebd403848de457531e9ad9ecb9","sha256":"81d8f257878be062dfd9048cea3eec4e290d5bf5c9ddff639bc95b218892b4d5","sha512":"d96228676b67c8cf68b4ff08e649d92a35e4b1bf7d8df5d0a8a827adc50f05c90437b8d8a5063597d65ab2d3a37b0a4ceda9f2a7dd8bf789d2275e8f8bc8a7e8","ssdeep":"","tlshash":"ba4184f24374a51c768e439cdfbb7cc8302b31ee911a81e4a0596e38d6c398d3a48e15","first_seen":"2025-11-25T08:47:26.466495Z","last_seen":"2026-03-05T21:32:49.990634Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/vue-animations-19.4.8.min.js","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /vue-animations-19.4.8.min.js HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: W/\"69a9a06e-3675b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vl%2B2LdZvfcirTxRtg4kg858S%2BktmDIzpX%2FYaWbyBcHTRd%2BMfD89KB%2BzIfKby%2BFYOrZt5pKU%2FvGpbJpEynTKvsnjD7zWbix9whnJ6NqTljn4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f709e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56504), with no line terminators","md5":"b0ee962d9fe6e393a21bed1c16ef9d60","sha1":"edca22972da7487ce5ac5d236a1655e83d9f3efb","sha256":"96cd7de728e122009133aae9ec89e16ad467911ecfdd708ab7b6db251fa73427","sha512":"6b0670d15f02391bba72710bd7b4a7dbca9c6bcbb297295782cf0b38e7d14a81dc9c453ba168e44e5dc7677d3bd58b41ead058d377d5328ca62eb50d30dc4f4e","ssdeep":"1536:1cwYJrldXHXTdXITA7/Qj8/Ez24HqgZe+IhSt6:1cwYJrldXHXTdXI8j4KMe+N6","tlshash":"3e240ee9db8b84ec8e56119dc473fc05e1585d23ceacb193aa2edec13519f62848713b","first_seen":"2026-03-05T21:32:50.012685Z","last_seen":"2026-03-05T21:32:50.012685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/euler.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /euler.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5FPyv0IgR0G1CCAvDSSescSgEUbLyyTfW%2BBhdfg8HuYe1LmAkcM0XrHC%2FkSgtlQlYvSefPXoVTgOwtUVmxcrURMHPoXTgVNpYnuPvHSURI%3D\"}]}\r\netag: W/\"69a9a06f-342\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81af9f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebab84c5284fd28befbcbde14a2c5c10","sha1":"94657d1b9eb2ba0b0044030d54d313d3878af0dc","sha256":"b09d7222a67397dea0a34d8318dd88e6ba5df8028ce57f0053580aa4378f1fc2","sha512":"f48fe57447f6fd351c6ce5b64749ac732adbc294def768a720c7fe4086b27368aceebffeb3fb30a17be8e5d8949f727b954f8b530570295a3d11c822bb179da6","ssdeep":"","tlshash":"e10148c4213932bceb1ac2c14f395e6006aeb4764ede0b182a771601a502fb7a4d5f6d","first_seen":"2026-03-05T21:32:50.013617Z","last_seen":"2026-03-05T21:32:50.013617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xdd50C053C096CB04A3e3362E2b622529EC5f2e8a.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xdd50C053C096CB04A3e3362E2b622529EC5f2e8a.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 12922\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-327a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsclR1S%2B9hEVPc4OXtD3mseS4%2FCIWwY4OhVf2io7f56M2JJiW2EGlDlpZN7a75e%2FoC7ZABoYKMMI5qJinOUA8qhodeCYjLD3%2FMvJSDaowjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfb19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12922,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"18b8cf608fa9b87e29ab43288a7a6fc0","sha1":"e6e47473dcfa7116e9c6e05319d28ce148a78524","sha256":"d4dc5c715a8d5fc418361bad6944f7516463604e9cc963b2d61cde9d543a8bd3","sha512":"c2834f87724f7799deeb1d5cd8615306920a586f7b2436e8453c2f98c086ac8e2efc09003155bc0d920e910b7365706ef9558d300e9b5170a6d5bcedb50860ab","ssdeep":"384:YYqVS7pbnhBNIWZqWe6fGGGGGGGc8nIB3:YpVkpTZqWe6fGGGGGGGc8nIh","tlshash":"3742cfb48d369e2fe975005f6cc2a916be313e7a877c16648c0af28db8cb3425dc5187","first_seen":"2026-03-05T21:32:50.014871Z","last_seen":"2026-03-05T21:32:50.014871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/upshift.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /upshift.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-9d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ACfWED3VraU4D%2FfN8wxFlWgEZSWR0Qldf72p0wtTJDdacsYssbw%2FQ7fjeEgKR5JrfjCox%2BawzPuNgEQeEL%2BvXd%2Bvs7fgerkMTtbmZJ%2BiyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dffb9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"402034dc2a12f3c21bc6b855d44bf453","sha1":"f0a3e8746b1aaf63788db87776af80f2e02abaf7","sha256":"a8f4e615c468d1b446e5e1ce28a71de0c6452fdf7c43c6efdac7b5f56f318a15","sha512":"bbbecf5c19fdfa887f3ab3338610461bd374126fe5ad197688803124af55efe031db6ad607a0a1777730129b03b49b19412e516e5acf38c27a46706c98f0cea9","ssdeep":"","tlshash":"da51b578d63d3ca9c84b1a9d144b95cb6e48b32d371841d3ae119b4b1d4e8fea3834d0","first_seen":"2026-03-05T21:32:50.016518Z","last_seen":"2026-03-05T21:32:50.016518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/secureproxy?e=jscdn/getFile","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:18.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eulerfinance.run/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://eulerfinance.run\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"rij06gkmky4qi1gbvhks\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MLPh6vZbeM9wQ0Nbd8%2FKb29kwiw0BCIhJlcCEkI1NmFPsbFbTMnczoR1vyxzC8ud4viUMLGjVAM1Wg1h%2FhKcACtMlxDdxxyE8cOWnHj0B9XcA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9d7c3b8898f39e07-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3321983,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5a863ecba4ab910b904b11ca71092f59","sha1":"39aa378ba460751f1a387c69d067011bd98c02ba","sha256":"976ef481420e8a7c4da351426bbf86422b39747624c84aac7fa26ed257850414","sha512":"cc59a16f24b9dfe8129be482fc6f780e13b3c4969e3e91dd5388b47c26a2bacb8d0e2bbfefbcf08bc252c7f084fa692c34f975c7d88a22280a767523e3c4fcc0","ssdeep":"24576:Cb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjehGS2GqAwxZ:AGkwdNZngkyHwn","tlshash":"2b2523d2bf6fd82dcf1c0e99417b1d0e69844d114048b6fef526ec4a36d8ba081eb96d","first_seen":"2026-03-05T21:32:50.017428Z","last_seen":"2026-03-05T21:32:50.017428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xA1290d69c65A6Fe4DF752f95823fae25cB99e5A7.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xA1290d69c65A6Fe4DF752f95823fae25cB99e5A7.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 13088\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-3320\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REpz6ngPsvwCy0TSSAuNip%2FA4ZXoNrRcSNFhnxkaDRmsM00tfNpHroHr6wTvaNOcgojzgPooQyl9ua6nYYcE9SXCU73rOppbjUoL9%2Bv8L1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfac9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8a71c199db91c57c394446a5f91723c7","sha1":"ffe4746cee3f4f95c35f7960788cf6ae49543bc8","sha256":"b57af02427eb2d4e30d2ff27032700056c2defc2796727c68efd9bd453b52c58","sha512":"c247369e9e10923c227d5efe4d703f1190362793733f6d907f17e235791bff35976718a6626bd2910d2cb18a1ca99ee73cbe3f919e92c508a70792c448856110","ssdeep":"384:B9RqfGPPqFPwGbc0oQ+3uOrNfuDvbIJr2PXQXWxo:5qwPqFRcj+MhuwkoQo","tlshash":"d842bed0d1bec8dc9d9525ab13279438e0dbc8c1eea31460e56debc800199cb4cdabc9","first_seen":"2025-07-05T16:50:07.571484Z","last_seen":"2026-07-27T12:00:33.776792Z","times_seen":59,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xdAC17F958D2ee523a2206206994597C13D831ec7.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xdAC17F958D2ee523a2206206994597C13D831ec7.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 21909\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-5595\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7BkQk2n4uDl13gsoeNRqLUCHcFSmMf80gLMrLXdBz%2FdyfnbmoWmCq%2Bnjtjy4KyEJPNzC13tIF%2Bh7BSi6Df9%2BKb5aoE1%2FUR1mmE6iCBGbek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfb59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"88d6fe2e9f01143ea7e308af24c16a34","sha1":"8c350b8219206aab258d026b822da994b0c1a752","sha256":"1c2ecfc8c08a821a4839f2ae0df1d8796a8df233939b537b4e26514fa4f91196","sha512":"a44a19c6bc1974304723b8ac921b711c6c49ef42f95f75db0c1c6c0b8bf22fe066eefbf7dab05625525a53e439f39f1463a85baa22d32dc0f6f237fabd87de55","ssdeep":"384:klNl53tEgE8yQ+4qH4arOcw7KvD8+5M+VVAFDAmY48TPdLFYG/olwubBL:oNlEf8R+tYf7KvD8+5Msa9uDsvbx","tlshash":"d1a2e109616fb913b04fd01b8f6c449a7c253900872df01674a7747aa82fc17fd32728","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-08-02T04:18:49.704354Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/yieldnest.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /yieldnest.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKc79Q%2BIsDgnhzs8JDFX9YbHwPO%2FVoUp%2BrvgNPgX09jq%2B0HYH%2FQgwXdM4MpuLrl7CgA5Z%2FgTwNCQG80XaD5L20tRnTDilKeTXn0uC8nFJM4%3D\"}]}\r\netag: W/\"69a9a06f-ba2\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81bfc89e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2978,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"546797fa4c4d393573bc3be90045c975","sha1":"c061b89fbf96e252916d517c5cdf6286c3899ce9","sha256":"babcf74272e9c121b0c33aa978a4517e50d66124d6a684a9087de7e6114913b0","sha512":"dfb173f9c07f0fa25b0da4fe39843d9594a669b123afef139975956d4f6c18f7eb13c6194a3096b566e5e2dbaf8958a137789e31aab72f0db049f310c5dcb355","ssdeep":"","tlshash":"985152ed97400af4ae94d2d7fb1510ab320b80fab9860b30c749bf157d459a8dd54eca","first_seen":"2025-06-06T10:47:29.993236Z","last_seen":"2026-03-05T21:32:50.020308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/cozy.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /cozy.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 5439\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-153f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2b8KaQCYD%2BjzACUDZG6DDuldA%2BUe52lM%2BH8oCe%2FfHOtnbYhn3g4ySCKyLiaLKNMAUhZy775Q5ohPaJbJxvoz3mfcOXMOh2nXCXdRlHoX%2FuI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfcf9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"01bfd03e7e2fb771d02a06c74c673053","sha1":"f7aee1e4c4eabf0dbda4f0c1c1afc8e1749f4b2a","sha256":"65962a0bbc0553617387c8049c61e4ee1f8f4f9457fb0bf93390e597fb08c8ce","sha512":"442e6694332863a1700b90d07160c8d50853a7c7e5cd5ba951b4ae5dce8ed85880042d80096c9ba74375aaf67dbbb1f3f9689fa0cce7d437bfd3ae72ecbab7df","ssdeep":"96:+b3Mef/2anyClU9Rs4DLIl0RDgDtbvpW24gpt90nAWjUfbeyP:+bd3vyMUzs4Yl0BgD/agR0nNUSyP","tlshash":"40b11a083daa5ac4a20f07718d57f2d1b901178dda60494b532aacb00573e8ff95ffc0","first_seen":"2026-03-05T21:32:50.02153Z","last_seen":"2026-03-05T21:32:50.02153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/k3.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /k3.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAXoof%2By8V6Bl8EuK6SnQ3KoTCZG59NpBDKvqd481%2FQIHKmj5bo7p1QzO8Tz18QMI8kxs6vyAlfb52sPJHiDujnTEto33fnqQoER0GDhQX4%3D\"}]}\r\netag: W/\"69a9a06f-4e0\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81e8149e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad4b3162e69432e84f9d6f4c74a305ba","sha1":"06c5f4a4ab45811c4dd9e75e9d7cfbb194f95e20","sha256":"d24b5e059c751648ad60125a3dd4abbbafb1435c7ae9ab33c17c4186093eea32","sha512":"f3bf81e23f4a35bc47bb65d589756c11144c45ffa842c6637eab40cf26feb633f70202793ab269f84f87c41052de3eb586f91cc81b0b42ceab8fc745e4a6836f","ssdeep":"","tlshash":"232135e5339074f0c24acf908f3d9aa91a2ba1fb374fa09c69849118f602ac2425954c","first_seen":"2026-03-05T21:32:50.022419Z","last_seen":"2026-03-05T21:32:50.022419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xB0fFa8000886e57F86dd5264b9582b2Ad87b2b91.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xB0fFa8000886e57F86dd5264b9582b2Ad87b2b91.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 12648\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-3168\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtJhzw3Rv4duTgTKBMc%2Be6IsgCJyiCHEjR6H1KUBIepNEfd66bUSEN%2BsijA%2FEBVHiu11wNFhES167Aq6LKdtjk0xVlG3sqM3BTvWkwrtVJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e81d9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"2d9e9e91fee95a1f5f546b39ce748606","sha1":"bedcac0ad85ae77b871da63e662563058db6c020","sha256":"e04a3757e5ecc876f90e7a59de98e1a268b4d1ee171a04b0d1f507d274e136fe","sha512":"0b65154424ffcb8afa93d100b2e27b6a6a7786f576f0f6bc7788bca69637042efe02440b932feeb938751704c0096fce978614420abe0ffb25b2f04a51585d35","ssdeep":"192:5LIt0yzqkT2sXrMLlCgcwSjy6CIDawqmIf7RAgTfsOHpHcRfH8Ed5QIrDzNM:py0XkTbQLlZSjtDawqbf7pTHxpEw","tlshash":"8d42df62439d974b44f5b018b869b94a3f69e991cce96b76430864fdff40c789042c30","first_seen":"2026-03-05T21:32:50.023283Z","last_seen":"2026-07-26T10:24:02.348961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 26417\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-6731\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BSaACxn3IFHEDHOM0mllkr3fHHy7dH%2B%2BSKhc0wk9i1Ka8Mur6fA6lz8YANnSLEX%2F9rRWxkRk5TO%2FFaf%2Fm1hcvquVmko9%2FivfYbeChC1Bac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af8c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"76c6fe8560fc7f0dc487edfe08cc5fbc","sha1":"5a87d585db1fd7b5bba9261366ebdda0e25523cb","sha256":"79deff2c3654a94ca0e483276831da515205010bf553008862a677b6108aeb22","sha512":"40b4b30feffabac2477e8aa695b4a7e4d9427e4abe38ffdeef9845280a945f0d64770d6ae13003420420e8647a9821ba95bb252983068dde6d01000b4d04f8dd","ssdeep":"384:peufZxlYncJ946u1CFK36U19IxAU0YhSyp1OofPiPdvVbFmO+28gdHLS34:pZYncDYEFK3f19CR4y7Oo3iPB8a9","tlshash":"fcc2e1d1c8a7d2deec4b1823b514eed561b57e69ff163488e4e42a38b6f5c40086389b","first_seen":"2024-08-19T17:21:32.593297Z","last_seen":"2026-07-28T20:00:05.315018Z","times_seen":332,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x48E502FBB6Ff2CC687d049150E2C8AdDC765A43a.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x48E502FBB6Ff2CC687d049150E2C8AdDC765A43a.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roI7%2FUcA5%2Fb9nzF0CLgNFSDaYXzuPQnsWaIru5YDEXRq%2F%2B8mOZVQw1xUXmIYdtvquBHfnHRVciKyiVgX9OM7E6dwk16Ca0dU%2BLD%2BqwRevio%3D\"}]}\r\netag: W/\"69a9a06e-d33\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81dfed9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3379,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5e4f53760f393613dadfcb79ef2ed58","sha1":"bac333bc5d09631a0981d875981be0712d8118b5","sha256":"3012191ab9df0de54d860feb0704189ccc925c8ad5c61ced1602a2b11010c63b","sha512":"c72d0101aff3abfeefed15d7be576e11f49c9ab7f027a097fc6bc8e0fee6c55d2d7e619942f995710a2e8613589a20ceedd0da55572ed10710965eaf403c8f19","ssdeep":"","tlshash":"df6145e6e3e862e0a001e7f15a7e6831377722f65b34cb1d07a89e70a52601e559dcc0","first_seen":"2026-03-05T21:32:50.024505Z","last_seen":"2026-03-05T21:32:50.024505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/strata.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /strata.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=881hxJy95FXUOlo%2FfxpcOnyJl%2FYRO%2F%2FbzEecjKXr%2Bg42hD71CrAxt86yjQoyrcxhxy1g%2B0bPVhl43hX7U1pmgIV0cShpBz2DIcXwRJfGBRg%3D\"}]}\r\netag: W/\"69a9a06f-793\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f83f9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db8e3de18cf73e2072a99bcf38ed1cbd","sha1":"3f3b7c2626b7914e2385792ed9d0b283d539a9b8","sha256":"37f2b77db8470bac045de2f9453211d250cf87f7c080902203139456900c3fa3","sha512":"f7eafd21c63b9d637f4ae96c2421ea499e4dd4cb5208f18ccf424cd5a225dcea92aa9061669c9f2e32aff6a2d9765100e8db4ae51f1c65b990a10f3ded597f41","ssdeep":"","tlshash":"7341ebd9a11d9531f2dcc8dd9f06b02862ab85a3ddd2d150c180fb3f28619e66c2e1f8","first_seen":"2025-09-26T11:19:08.552058Z","last_seen":"2026-03-30T16:23:42.35549Z","times_seen":168,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x23e0D07095DAec91B6Ae016cA9F08222dCc64c49.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x23e0D07095DAec91B6Ae016cA9F08222dCc64c49.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBHjkZ3zVTdNVWMHwyUClSk1YekIml0N1nL%2F7yVzWTpFFPDDvR67eZITNxmrZ%2B7It4MH3EdAj5aEgKJKAmDedwN4hh1i7gge%2F7bQr7OzReE%3D\"}]}\r\netag: W/\"69a9a06e-e40\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b8208499e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"222169f602faf335898393bf31adb50e","sha1":"fc359f3806c61b09473ed6c9ddf52b76c8999aa8","sha256":"fe9ad0b6c6a257373a61e3b44f4798139364c85e53f0938ddb2ac8747aae9cfc","sha512":"e3b9ee3ecdedc8ed86d112b962c4f983e216a44e9bc9878a429e6cd7f65e1d83143f26e5cdbbb3f9afc9831bd091b525e41774925c373a0758c17d6190f92ed9","ssdeep":"","tlshash":"40712e6ef348893cb4112778cb01723411760ff6a287b659c9b36032dae512e1a7f6d7","first_seen":"2025-10-12T18:27:43.003448Z","last_seen":"2026-03-05T21:32:50.026503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x1202F5C7b4B9E47a1A484E8B270be34dbbC75055.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x1202F5C7b4B9E47a1A484E8B270be34dbbC75055.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 36976\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-9070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VioSQUNk4EmCy7GndutYbf7fQWbYljJQyKQvkNTdhUfIKL8uiYeVO1dG4jx9KhlYUibUM0FXHfse3sT60amC8q%2FQHpMvDU3fjsTF7bAsesA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b8218599e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"fe9664396c888e2c96c1abff689ba125","sha1":"1f75307f2f14756df1b8f43880699c90d21ddbf7","sha256":"1461d0e4a9fdc64af499ed004a5c985468122dbc9c3c76839e2f6afa3bdd4775","sha512":"f47330fed8ae8ab7427c90c7212d7ff9fde26ced9548d036ebd954eb0c35d3226a53e58d30955ca70b6eb67962dbc96af3aebb2b80b73ca53ad38846cd39f5a3","ssdeep":"768:YsOMZ61Bsvn8uBKtCK2RPI2g3FAqCRtQozfcSR4BHdLcJlWhQePLU3rC9:/cfsvnn80LRPIHCRtZcSRZrwQePL1","tlshash":"e9f201efc83b40c745178a51e09438e9c0f1b75732884ba0a3ef133789d6d1169da1ee","first_seen":"2026-03-05T21:32:50.027342Z","last_seen":"2026-03-05T21:32:50.027342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/d5a4f7f5bd44f6a0.css","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /d5a4f7f5bd44f6a0.css HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: W/\"69a9a06f-e72b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOgSbhx7A9lHxIxdJHPBEMCyWEC69I2zRVr0t3qgdJKIZZQMdn8gqs73CsZrkU8n4r%2FoTkfJz247PJTHpsNwzww4HMrvzarz5TAFKcCubOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b818f679e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59179,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59179), with no line terminators","md5":"9618472a3f04fb87243108c910377170","sha1":"d4d9c1162011a67f7d4bf9bb8ae3ea64046422d9","sha256":"0f4d5d55e52470484bd6ac532fc38c47f2e550cbf537a78eecab651c61ee244f","sha512":"13db331804caaabbf3db0e0fe4a419c9360ba2942fe44a70a718472f3b67742d5831c303df92e495f387048de9b13f0ae53ecb2f7f681278862a390f4068f31c","ssdeep":"1536:VMCMPMCMjMCM4MCMwMCM3sVM4dvj4C6wJdG:d4bwJdG","tlshash":"16431eaeb9c316f65c23976b03cc8a6dc02be991ce1347ad73d6060945cebf16353629","first_seen":"2026-03-05T21:32:50.028127Z","last_seen":"2026-03-05T21:32:50.028127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/56de9c32f8febcae.css","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /56de9c32f8febcae.css HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: W/\"69a9a06f-6d9c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3S2KRtv0%2BjaORum79z5ckpuYLCq5exyBiT%2B9IKLpgdP2t6W2vwPRFa7u7PjwQ7iA%2FeJeL0%2FznOvEeyjwWl24APqpdAS%2BEsYRZTaa%2FvVRmuU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f6c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28060), with no line terminators","md5":"0b0b6bce99f8d814272a3383f4046234","sha1":"27c93f43424306776e123d58b5118978dda07fea","sha256":"a03ca66d20258a5ef6b5679935b4a2a2078f06da3082b1984308b43235757ecf","sha512":"f1adf5ecfeb48fb14440ef5986c224ec98eeeca08a1725b710ba360d565da6d34d97f24f855fff3397c4c482b4c5dc62cb8725740ab4a30b46260d97cca26b4f","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPoKPFEIN4:TpSUJoAgzyAcoKPFEw4","tlshash":"5dc2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-08-01T22:38:10.78457Z","last_seen":"2026-06-24T19:35:41.43969Z","times_seen":33,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xFeDC5f4a6c38211c1338aa411018DFAf26612c08.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xFeDC5f4a6c38211c1338aa411018DFAf26612c08.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 23027\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-59f3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDwB3wGvPfkMthER7wQSknG9DcWQKGKVKyUc6xJdTMz9461rywMDqm%2BG09OJClrNTTnzaIsGXJBCpsz9544icTPsi4OWi8dwxFLy0wDNJm4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f819e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1a784f1fe0c3345aebc0493a4a1af8ef","sha1":"829e62e56137adcb540d72dab66b0ff35b8983bf","sha256":"ffa1c1d706f0225e2db1e657a04fedd8e55f34c4ba8b1516c29d24281ddb4e45","sha512":"ad8d977c29f18c0b00bc1900989353e72a0bbc91530f034eabde26af657aff3cab755ddb273e3b1b3eab4037e690d20b32fdaaf62f6b6eec66b76682c6cb0a42","ssdeep":"384:fgm90hpPdih08peCs7jsw/mPcU3M/ByFjU2fc59andI5m3uPG7EojlZgjtNVu:fgm90hpPC08peLgBcVIZcfanK5JPGIkL","tlshash":"e1a2d1d6ba54f98dd733b5a12dca8c26dccf1d0c0769d55ca456783f8298220cf8a47d","first_seen":"2026-03-05T21:32:50.029985Z","last_seen":"2026-03-05T21:32:50.029985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xCAcd6fd266aF91b8AeD52aCCc382b4e165586E29.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xCAcd6fd266aF91b8AeD52aCCc382b4e165586E29.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9808\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-2650\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIA67RPO4AcsfBP0Uo9PEN7XcOgPq91jiqxWaXOboWCx35mHUpM%2BIQaCNmzk3%2BPJ6mGXEbQ6KRFiu7AichRM0jOWZOqCMQdq1vXXNWx7Zuk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfc19e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"883a6190782640bec1248e43db8a09cc","sha1":"dacc23f283a7a399964a260c3f8555b1b6a50cf9","sha256":"5e6214deb7a9992a47327ed52b6d873a508e07ddbcda31a38f8772822cdcaac3","sha512":"1817666535d60c521f309d1a28d7dcb4b169f940164d1c3a68b2ab3c5e3ee737804306fcaa48603a28864f550f0c43dcac419bfcf9fdc6ad5e9d814764456523","ssdeep":"192:jcOy6YQDNPiALZCiJNEnDPfdTINv5jH5o5AwqTrsycpylrt4jjgMddq:gTQYyZCiJopIpzHwqTr34jjW","tlshash":"2712bfe4001328719b72336db9a8ff9bbcbb87777d5b894097cde99061423c78562660","first_seen":"2026-03-05T21:32:50.031119Z","last_seen":"2026-03-05T21:32:50.031119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x1132065009850C72E27B7950C0f9285d1D103589.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x1132065009850C72E27B7950C0f9285d1D103589.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 28386\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-6ee2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E22z8HogKORznU3MJZ9vkJcz48aVVvGq%2F7WgKhgD0mHRGtYmjzECzi2zHNfZV%2BqpmF1oLMyI2IhB7LgTWYyBTMHlDYWVkWKBhSgRuSb0XnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e8119e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"6f69a03a29aa79d793a7d6a3bee552ae","sha1":"2da6d8ee2c95ab66919d554efa46b29be0ffbb28","sha256":"3e7556d0660d6e008823bec303380bc8fd27835e82db9d4bd7e1398f06445286","sha512":"cf05b43a9456b6d3c2c558acf07d7276099034cc822e253af2b84059e919353d5ab6ea5cfd256a1c3a553b01d4ddc3ad4741da728c9338be70134589a5b2b4dd","ssdeep":"768:1ijeKp1oksk9dcMNjnB6QWSPwmJr2DkQxUkKWQlaD:AeK79dcUB6QLP5sjKpI","tlshash":"7fd2e10cdd62ecfb8f9c1118b0e62719727b0420adc6e0a594a7d31d09fb79571eaa17","first_seen":"2026-03-05T21:32:49.981919Z","last_seen":"2026-03-05T21:32:49.981919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xF3f491e5608f8B8a6Fd9E9d66a4a4036d7FD282C.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xF3f491e5608f8B8a6Fd9E9d66a4a4036d7FD282C.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSxF%2Bc%2FjOI2RheLXz18NeNAA6FBihigLIu4pFGxeu8P7983Y91bt93EHF5DckR%2BFgckNAElnpBETEer78wT8j2SGxVvf8lMe7t5OymgScag%3D\"}]}\r\netag: W/\"69a9a06f-b0d\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f8349e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2829,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74bf77908063bdde23dae8a322003144","sha1":"35d1f0498fcaf1a409eece0753ab38c501a48023","sha256":"4fea5fec51d774ed17ea2212f41f634bc47009df1bb604a8431a2644573a4e92","sha512":"83ae6ccf61e6dcf4add382234d9afa786d43e705afb46499550dd97bd7ec23b09f7731a80cf203e1ea33a84f3733f9ff538062a49b774d9c82e9be70bffcd8e9","ssdeep":"","tlshash":"a25144f4a379445c792502a8f7b368a12b7fa078f141015cbd5e2770d1a39cbf92b664","first_seen":"2025-10-09T06:49:21.283554Z","last_seen":"2026-03-05T21:32:50.031947Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/lombard.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /lombard.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCILiP70NVX2XA8HrzSUDYhHjK0Rn%2FUx0rxchAQTPNz883svcq42J2nWE12hmaJMWoL3DvVy4ytA2KSOaTkXlrYhhP7gpWYiuw75PaYRto8%3D\"}]}\r\netag: W/\"69a9a06f-3ee5\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81cfd29e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16101,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b0c6e7cd7f7867f3a9b57c2d50d06ba","sha1":"fb8a2b1b5b643d76c24fdfb750d24459308c8343","sha256":"428def591352aaa83b999fb8ee823896d9e097bf57770560bd81b02a13121174","sha512":"369023466516c4bb228e9204f889781626d33c1e73348115e59c70deefe3f8a852b7d45009511cef5bcfbed1815eb5a82f94b7c482ebfae5247b356c14b0c2bc","ssdeep":"384:5mYO3m+eSlM+Bg17PIuFscpJZoNoqGTkdWNxXVThhhhhjU:vO2og17bHphwENxXVThhhhho","tlshash":"2472af7e90e2bb93a26a4386ef46061f3c9b3487c2b5a1670e1d426f81331765d358f6","first_seen":"2026-03-05T21:32:50.032798Z","last_seen":"2026-03-05T21:32:50.032798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/falcon.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /falcon.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 10716\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-29dc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ea9fPA%2BpJ%2BaSOE%2FjMcGZXjEqrLD%2FIc8SFHLgm5jatuccH0G4mj3Uqw4rv1TON1u3f1EqhG6WBoaiUZXlhrXqFHWgNXdchOL9DcTT%2BlE4f5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dfe39e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"c9c0e5f060ab775a3b6f1bbe9a6accdc","sha1":"4033113b8af77050f8e4e716d24eaf8bfff2c731","sha256":"a0ee5fd75e0eb0cf5935167b60fedddcb912850f6fb0190e01a85e49cad51a6b","sha512":"446e04a70e973f93194c583c5b60796d300bc4f34a3f647063eba4985991f2c7c6dbb04cd881abe3d5225a6bbbb67b4066cf6cd3e4c8409da96d54c4131b6911","ssdeep":"192:U/zlt3cGMKDOH1R1ij2wpJuQbX2F6bGXRy2HUKFDYdTqTsUpJPip8kzTY:AlRWKDOp0duQbXCsQf0KFDUTq46YfY","tlshash":"ce22bf096192d50e072f06c2faabc05cc3ba4b2e7d64c64e1c429da6af1dc6e15bc3a1","first_seen":"2026-03-05T21:32:50.033608Z","last_seen":"2026-03-05T21:32:50.033608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/nuts.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /nuts.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 623\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\netag: \"69a9a06f-26f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FxSGY3FfyICPGy%2F%2BXgBdNiYJWrAq4vK3wDvwsnJ1gtMzwOE48Q2C1MHPdRrWYT87IlQfFuzsonz%2FuM%2BGdwRqgCQNnLTD0FOTvzXRmBNedc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dfea9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit colormap, non-interlaced","md5":"5d113ac8bb5f0a0a69fc49d6ce82bfde","sha1":"6fcf125722a01320cc7f9d32a3d1cb26e88671e6","sha256":"024e456447a3ad573ebaf5caf2eff490e0ee6c6dfb7c39b1b423c3694234905f","sha512":"79c2e12a980e7e187c423fe99a1f82efd36f6337031f91d44216d6e5d1617c26849402c52294efe7056016089272c56a204bb22b7336bef307cd58a677b37d1f","ssdeep":"","tlshash":"c8f0b7b2e44139ed45113083522cbcc64a94cc182c150251c7fd343cb53d539948694c","first_seen":"2026-03-05T21:32:50.034631Z","last_seen":"2026-03-05T21:32:50.034631Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x61da65F0534C6A4F4c9757f2979A923c08d6D2aa.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x61da65F0534C6A4F4c9757f2979A923c08d6D2aa.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UB8GqwnlhDr2WLD34caiyHxCwiJw1D0PHNtNBsDACIajkwAFo%2BqvfiI4%2FpmO7NYYvOn17d9oheuOiMY1EjIZeFAEbJZFGGpX9%2BVMO3PgEzI%3D\"}]}\r\netag: W/\"69a9a06e-7e1\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81e80b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0affa9b162334e40f72683068ba1aeb","sha1":"abca8e380dce8f64af2a68a885be5801059786c0","sha256":"4fa4ce1d3439feacfab656300e8f6b9965bb64863d10be5b56788e8551422412","sha512":"7e4830dd9a18c158c9e10ee8f94c8a8e753de63ad783b5cd620379d3433d5f34df0b5375d31efd11891c6e36737edae45dc446fa8019b0cefabb049b651d46c4","ssdeep":"","tlshash":"824176b58038512df904860cc7dbeec8325c60afe744c5447ae6eb5e10689c93c9c77c","first_seen":"2026-03-05T21:32:50.035594Z","last_seen":"2026-03-05T21:32:50.035594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x50Bd66D59911F5e086Ec87aE43C811e0D059DD11.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x50Bd66D59911F5e086Ec87aE43C811e0D059DD11.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 15011\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-3aa3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gVytOrsccjRHSwnAK6CuYh1tsT4KLpg0532FkaFr7UYb%2BTvtSiXjq4VHM6lI6yUK2n%2FxNzk8xeyliOO6AqpZHmFAVLzw3lXpucd%2F27YlDQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e8189e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 249 x 250, 8-bit/color RGBA, non-interlaced","md5":"d5ebda08996647154cf6b9084907240f","sha1":"0e8ea983637b0098b606ad14b06f848978ae72a3","sha256":"09540fa8cb3fd5174d1c2e98c79ea01eed529043186b41ae04203692c4f0a838","sha512":"4a6ab7040bbf25db01cf677dcaa0b181af187996c754800a5f37a44e3f744bb33722909995f11ffc3b9423585dae73e6694fac20a3c0a73fa6ee5afd506321c1","ssdeep":"384:9snP5OALqtkegj2wmWTEbH34jJsw90Mref8UvM:qPR2gqwm/bH34jJZ90nfbE","tlshash":"2062c0e85ccaba73a125ae169757413f20b3fc542f339b08614cc23097d53d212bd976","first_seen":"2026-03-05T21:32:50.036454Z","last_seen":"2026-03-05T21:32:50.036454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xcCcc62962d17b8914c62D74FfB843d73B2a3cccC.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xcCcc62962d17b8914c62D74FfB843d73B2a3cccC.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 29871\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-74af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FVCVVYo7z0zQ6QgdNEUTtloh%2B77lqyFUOgVIqzoVF9PNwp3ocDrubOWmZhe8TOqX%2F8VODzxoSA0ANKDroBOwlO8XVCQj9Z%2F0DjBiGMkgtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b8218639e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f5135c83a12b252d3a79138db391a583","sha1":"7d5b17d5483052b8b8f85e9086b26b31714e3deb","sha256":"ef2ba9eb82596b29eecd567ddf1d1a08ec7fd48398dde9f6eb2eba7503a73aa5","sha512":"02ea5fcbc62aaf7e2a7bd8589cd98a198bbac446badeb82b08eb349c12e95f92ef74f9447632b09f3c9192e81ce9942a33aa1f54adcdc8e27755a226edfa878c","ssdeep":"768:eo8gXyK6tK2clzKoqJOt0zp+gj1FOfHoci:eoNiKwK2QvEpD1FOfH/i","tlshash":"c9d2e0d9c80cdb369b163d578213d8d0ada69ca2c4af3c90bb2fa1d457c1869389fb01","first_seen":"2026-03-05T21:32:50.037271Z","last_seen":"2026-07-23T06:21:10.022807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xCd5fE23C85820F7B72D0926FC9b05b43E359b7ee.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xCd5fE23C85820F7B72D0926FC9b05b43E359b7ee.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 56185\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-db79\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58CtZe7%2BiXfNTQ1fYlD48xaXdnBCW00g0GpNTdYqHqVf%2F5PqKnniDXuvjeJe9ewValgShTZ%2BjldFrOUeEYzXh0rUJh9jZ8IZjKX4q7wD2Ls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81afa69e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56185,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5a2c197e38fd2b23ed59d85be061e482","sha1":"2c4141400c5ae9721c2b27340c7832f791eefaa6","sha256":"3ac59acecde092983601df6dba9a979c9be394acb38a76ab19f0561e0889a282","sha512":"968468b2c58589bc05c9c59ab5ca87b2df98e84ee5ee579341f3ab696570a269354d248c97ab7667bdeec79ddebd17e7b03f3e6deaf595975303951f07d9a27f","ssdeep":"1536:6tHn95wsn9GMRlvNdgt/J/hZqyG7ZZTKR:6xzrsYXgDbqro","tlshash":"3743028d7b04f19099059671827bbb39c63aa533b1be444ed6295138dc6d2c2fcb3f98","first_seen":"2024-11-27T11:16:54.388852Z","last_seen":"2026-07-27T12:00:33.632261Z","times_seen":127,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2984\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-ba8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvEO3x93qHMsKUMQY6gSGLjLj82TnVOkah%2BGKqaD%2FbnRCkhtP%2Fnw3IggEe7poBQYr%2BBaYa8hEToad2fpedbyUvvycmQ6Yxzx%2BNQFPnNo5CM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfa99e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-07-28T13:58:20.864507Z","times_seen":951,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x7CF9DEC92ca9FD46f8d86e7798B72624Bc116C05.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x7CF9DEC92ca9FD46f8d86e7798B72624Bc116C05.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 38824\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-97a8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Gkjxth9Z%2Bu1JjPZzwpR0qll1H%2FwqddXln2jVYd%2BNnjhBhIs0MzXfCQiqwLE0CsDvjYla8E7zbnVwuqxghiGicNq5dexlsfGc3t1%2BNX5VSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dfe99e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38824,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 249 x 250, 8-bit/color RGBA, non-interlaced","md5":"ff586cce6d298d616284da3075c4052b","sha1":"39c115fd8030eaf2b6e4717635aa75b78a751947","sha256":"ba7f2355ed8995c16c57f321556268f6644c09347e946a7526c908a87cf7c764","sha512":"3c7f9635f124038ec9ddfa25166cd34f81df84bea2a1d4b262d644ee26f57421e22203c38aa5a4c302461fe52500ce1716550698c83d6f0ee53cf41ff17f10ce","ssdeep":"768:s/eOlrc9Ryj3r86C6SF8tUoIz2frx+9yq6mWFvTtgCTgqSuzUzZe3dL:smOlrc9Go6CpOt9s2TCFWgCTFV6ZI","tlshash":"f80302f60472d4fe8e0fb36c5b312510ed19744cb76857a46cb980a4ed2cdd6ae80b67","first_seen":"2026-03-05T21:32:50.039222Z","last_seen":"2026-03-05T21:32:50.039222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/resolv.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /resolv.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=et0vOleQb%2BsJ0EW25D0c3FxVKmA3Ug4aZ%2Fe7qiSUkFrX7Zr%2B9cjiGFM8BGKlO%2BQ%2BeU5j6V3yWPjGG3qf7vQ37%2BaB6fFj269Yor%2B5kPrdsOw%3D\"}]}\r\netag: W/\"69a9a06f-51c\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b8208469e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87c2dbbff3f2c0e2835399501598b9b3","sha1":"192d796bc5fafefa0623a2a107aea5105acb3748","sha256":"2ff621525348e3516c87732e264baa208a0e34563677df0bfb135feae39d34e5","sha512":"6cd6a621220a5eb7f4b2ba735608f3555f11a775a9de9ead5eb8c6d5cffc4dd8b457e33fadaf206fbb1bb4c884ecbf87f2cba8716d7274627c2d4ba04178fec8","ssdeep":"","tlshash":"c621d087a344683dbf1303b5db79b93e007e0cdc312b0128e8d90a619095aaff076f89","first_seen":"2026-03-05T21:32:50.040306Z","last_seen":"2026-03-05T21:32:50.040306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x66a1E37c9b0eAddca17d3662D6c05F4DECf3e110.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x66a1E37c9b0eAddca17d3662D6c05F4DECf3e110.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 36976\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-9070\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15860\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flu56mMWAooCZLeZ%2Fk1qyfnvEldwk%2Bk4d8LWTpRL0ZlvN2aZn%2FFM1EX2kLrB99fspq7x5owXyZcvh9DNDyj04J27pMd0ocw8u%2FW%2ByzY4q2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b82185c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"425169ed6c7f2db6b6163a3f74405813","sha1":"b125e9290bed46fe19985f228812d41bacffce41","sha256":"d54a2f7b8c5fa4bfdc4580c898059db8b5cf80411d657a9646ae36c784c27d8b","sha512":"45f923a7709424241c05c7a37491e61105f7b0fb0c78e6be2824727c3558670f30a25621cb30f0ee9c6d6321e5c787d5922fa2cb1fe0314eca9c43e3f5e241f3","ssdeep":"768:tSsOMZ61Bsvn8uBKtCK2RPI2g3FAqCRtQozfcSR4BHdLcJlWhQePLU3rC9:7cfsvnn80LRPIHCRtZcSRZrwQePL1","tlshash":"7ef201af883b40c745168a51d09438e9c0f1b75732884ba0a3ef133789d6d1169da1ee","first_seen":"2026-03-05T21:32:49.978915Z","last_seen":"2026-03-05T21:32:49.978915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/sentora.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /sentora.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15863\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2v6TKoQqgd54NI49df8eRtQsf%2FKWC8c%2FelWEVYiVEFv3ZZiWykGKtwFt%2BPMZeumHIRJVbWc6PcqKS90NVXqceBbEXA%2FRWD%2BnD2oZsrx67M%3D\"}]}\r\netag: W/\"69a9a06f-fd2\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b819f7c9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4050,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f1741cab5d393679cdedf1f830c7eb8","sha1":"bb49fbfcd8031af6bace9802a8e59ddffd81b003","sha256":"20280bcd33119200f3cce84e3149097bef1c3280d15a1fdbc387c5dde38c71c9","sha512":"f0aeacf2ca110ba22b17d8bfe6131a7426ce14738c7236b0bbf78bd6007b9365ffdd47d18df8efd49f6da4b9df5cf6677427a73029112bc3f82a018dadaaa52d","ssdeep":"","tlshash":"8a8183dd2b7098d58ad88adb7f0341e928b3e1739d88c840d4c9cf5e58e486c6cda9c2","first_seen":"2026-03-05T21:32:50.041093Z","last_seen":"2026-03-05T21:32:50.041093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0xd0609Ac13000d88B0BEbf5Bb21074916eDd92Bb1.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0xd0609Ac13000d88B0BEbf5Bb21074916eDd92Bb1.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxHNn9WomCAz0a128dCbgQOMvhz8My3G259IiNavFWi3a8xOFqwXUKEvmJGTjDJ%2FvLsdrTPrYCb11%2BqjCqKpH29ot5kU5dxUgQOO38YgiFE%3D\"}]}\r\netag: W/\"69a9a06f-8ba\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81bfc79e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8308eea307f09e0a696369db43d164cf","sha1":"627b4a4554572df5561508f380bf3e22f80f95f2","sha256":"594373dc07905c9241eb5a80d31f68000a086478ce38fe1d0f33e6d41041b66e","sha512":"efe7fdda10f64d1b3b855685a87f86873ca5369de28eacc2320aa958045c389a71ee267a1e05e89617d32058864653ff283f3da3ea5ebe85c32b16624f44cfed","ssdeep":"","tlshash":"164186f24374651c368e479cdfab7cc4303b30ae911a81e4a4596e38d6c398d3a48e15","first_seen":"2026-03-05T21:32:50.041926Z","last_seen":"2026-03-05T21:32:50.041926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x2d3C279E5FcDF5b793c0a75ed90738D7369B0b83.svg","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x2d3C279E5FcDF5b793c0a75ed90738D7369B0b83.svg HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaMvqXiHfDYx1owXsF%2B2CGmXeevZZ2YO6rs%2FF7UDYEAInVAV8CmiTmKhAace%2BxogO6mS7%2Fw3i07ZEXX7ArvNk0jbCuql3DZodMu0Y8xru%2B0%3D\"}]}\r\netag: W/\"69a9a06e-a00\"\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b81f8379e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ca42ee94d87877f5ef710a9b8253173","sha1":"c96607620e4ab713b357eb0db4ee70ed8e63a93e","sha256":"f865e8ba5c8f79a170b082f9074f029901c42fdbabfe21f38bcbd051b399b2ca","sha512":"e9558e65a375786eec74178ed7e23798d226f49aed8a71c4ed8ef3130f42e13afce64ecfb2dd1754b98ba91b3ab076008c8989676cd3bb7f3cd6b03a48ae09e4","ssdeep":"","tlshash":"925155e09270219cb9290358ffa676d5276f30beb152458dec5d26709196ecaf803618","first_seen":"2025-11-25T08:47:26.473949Z","last_seen":"2026-03-05T21:32:50.042758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x88887bE419578051FF9F4eb6C858A951921D8888.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x88887bE419578051FF9F4eb6C858A951921D8888.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 46544\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-b5d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15859\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qTlK8gbu28TFpjVkdr2tdvFP7JNVYxwP9zTHLXWnZx9sxZ%2BS%2BMItCWcFjwm0qv%2FMTDpLHhZwKnlXZy1oZrGtRefsOBfu3X8E%2FvHYfhSYpMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b8218619e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"fe3d0bc09b1e4f5a13aeef004db22db2","sha1":"c6c8b41d3314f0418b0ee2dccab799de37b78c01","sha256":"44d4f0bb6d0f812df8b4976cb897708b0b848d231df996fd6b265bf635472360","sha512":"d2e893ced475e6363e581652fb7124f31c43c7cf652c3e3b3e311a21afbb00b7810991ae08e8883d5d347889cb7b38166c8fd2e54ef23527607f4efb62dafac2","ssdeep":"768:VL9NmmBpoX67C9XHunYi4aRh0jGZZEczur04MsDWb9Gc4Hrnca0Rq+eNPIDxfFik:V7mmBiX6W9enYp4hwourgsDWbcbrncnV","tlshash":"2b23f1e441ef06f059ce61d34d0b705e6514c986399cf24ab523b1aa8b412f4aabbfcc","first_seen":"2026-03-05T21:32:50.043623Z","last_seen":"2026-03-05T21:32:50.043623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x01Ba69727E2860b37bc1a2bd56999c1aFb4C15D8.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x01Ba69727E2860b37bc1a2bd56999c1aFb4C15D8.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 21121\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-5281\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdWwibtdKKTQPA8H%2Br6UKyDZ0FS1yjKWowv4R%2FJg5Fpt4u9F7wkCz0Z0o5pYAssK6CHkAajt1Fp2UsIiERRE7iEdjSXRcafHUgYfxP5u%2BZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81cfcc9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21121,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"23e036bb797913e240cb0b27b44af8fc","sha1":"b8cf28eeef4c6093b719cebcd993ba4c5fa2271f","sha256":"a4a61e5501f7c3b9fa2f39ca773c353ce9ff1f42169d16b586745c050ef64808","sha512":"1fcea0c4f2fa9fbe3454d19ffa625754f7957d7a3fb508e9e77417e28c7933a5c0adba20c9bcccd2c6d17d36b65fe2b3b2e2a84331ac82b7e76c23f10b1082bb","ssdeep":"384:7VHorKaMglpATro2qdYKsJo5qqEFf8NsfX7xK5gU2mOjafxlODIS3bL7JaX7F:x8Mg8ro2eYfSFYnX7xKeU2mOwxlODIS+","tlshash":"4592e1bf02d723632911213dda6be4161e2b1e0a55b3930e670bc8678f6c6e37f15171","first_seen":"2026-03-05T21:32:50.044409Z","last_seen":"2026-03-05T21:32:50.044409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x68749665FF8D2d112Fa859AA293F07A622782F38.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x68749665FF8D2d112Fa859AA293F07A622782F38.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11520\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-2d00\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhZ0hHnF0uG697ASKehTTzk6aW7TFWzmHSYnj93AS78%2FAczTI3jpjkKodQtFT8pClXy2rsNFDXJaU0hjEcSes7aeq3H3IYRo5waj%2BoBfmBo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81dff59e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8832d9625d7a36a7baa568fa8d0259c6","sha1":"cffbbf9372f81587ec45ce08550f22944c74d3b8","sha256":"8f02fe29409e58fcafca0ac1285cd2332c3fc01d37c1648c2913d920866970b5","sha512":"c66de6ca5f4d1a1099358838a3cc871209e62381ea87a38b17dfd1a6ab297331854d7dcd49402c429724d51e734d720d242418a3765290b986af79b0f7bdd46d","ssdeep":"192:eS6lUSSCM4a63qP6w7J8KzWA5J2FV74jO0h5xBu4ys/3LYgy5S7QK0R0pbUUgH1V:B2USSCM4X6y4J8HA5JU8hHH/3LtN7QI+","tlshash":"2e32bf899351d4adce132305673cfae1baab98f43e902934c569d2883ec65234d5b342","first_seen":"2025-07-08T13:14:10.492274Z","last_seen":"2026-07-27T12:00:33.715797Z","times_seen":61,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x07a36C630e3F072637da3445Da733B29958D8cAB.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x07a36C630e3F072637da3445Da733B29958D8cAB.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 6105\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-17d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1J0IZs%2Bbm2Rgbk4d9ek%2Bm3KcWKfPu6fvB4KxUvsnSLXYw%2F9y4Ky9DZoFsrZuABdHWfK1nsPWXDVNIhEQ2ShZ2f%2B5Jzr2cJiQWq2U%2F1yodk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81bfb39e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, interlaced","md5":"d3d85129b175386ba394e4af7659c276","sha1":"8c5490bf7a06304a5e25c0f9f1f66fed04b3ad64","sha256":"b587a81badeec005787293bd23c0f9943c455748475dfe2ba852c0855b703924","sha512":"9b58b91056b1d29e96e5603b5780fa17253293250e2ed18dccaed831965d699509e43207f39d607a212c751901c298542bcdf887642bbc85177749f45d42dd0b","ssdeep":"96:UvuZ+Mz6mpnb0xkVt8voKeeT2/MuAWcPz1F9HPCt0+ZIfHrCIghpWBuFNOTxl+Z9:n+m50xkVthKBTTxF9HL+QfBuFISf","tlshash":"c9c1a0e4115a9411da87637dc428d6202791db86f8d94e20c446d22dd6fbbde0f49cce","first_seen":"2026-03-05T21:32:50.045832Z","last_seen":"2026-06-01T16:47:17.112937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T21:32:17.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=af4QXkOyYBEMfCxvGFETMtqTDhsBv7lEIueAzey%2Fc2pHVjQkpdQ3J2LdAr54dnUglYDwA6%2FMzS%2F0p0Me6JKMSuULU27y3ZOnPMUd5Vbsyes%3D\"}]}\r\nage: 20697\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d7c3b800d3ce07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":675061,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2425)","md5":"53e47bc0b49526f52493f2b1f9345beb","sha1":"bf2fc75aae8d4e69d9b7b2b57faf25ea428a7f92","sha256":"4a9b5bbc2bef8009d9244b117c8f9047b6f91104e297ec01779caea18f8ee203","sha512":"fe5c3ceed187a9c12b19a4610f560b8077ceb210164d9f3626c756e51ebafcd4fc9c53d4f8ced98eee1b1e0e9c239580d8cce363b67021c046a7c7953bb838be","ssdeep":"3072:7gjbR0Jz0WLEBcaoi3w75JEju0sQRekefaaCm73hyXvUn4XP3KXIkFuzXRFXCqnl:7KbR0Jz08U1y0KSDivw3278","tlshash":"3ce4859512f310ae505b80d299b2a709d082d107e357eeadf2ed63d73fcac4619e229d","first_seen":"2026-03-05T21:32:50.046858Z","last_seen":"2026-03-05T21:32:50.046858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":93,"dns":66,"connect":8,"send":0,"wait":28,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x0e397938C1Aa0680954093495B70A9F5e2249aBa.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x0e397938C1Aa0680954093495B70A9F5e2249aBa.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 30071\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-7577\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AialBUAVNVuHb2nwKKBA4LalxOYEDP%2FXEyPiy%2BEsEmjb6XaoB5vi0S0YqinOZmflRNjqrrs7FK0SHCgx4htqQptgCjhvlkV1oyXuminSf2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b819f859e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f7c490986d9ed4dff21dcc3164f9e4b4","sha1":"bedd7a779e7dbf4e9560c8d095948ada864da05b","sha256":"1989c8719d4c4398e1fa729465edb84935816cba3aeb4064728afc83351cf73c","sha512":"86f60cd9edad0c5cf11e858c4d34379e48f0be4f81763d50e27c896923bb95d4c53e18ba6fd44776bade41aaeb05d281e73bb9cf47224d804a45370416cb8135","ssdeep":"768:UsYKx1yiXzy+/C69t1SoVfxTRwNCdtHY5TDb/DTcdvryO6V:AK9Ae1fxFUCd65rcJuO6V","tlshash":"ffd2e0906700497423bd7e9457de8c5b40693a839ecacc2f8935998b348fb1af974ed4","first_seen":"2026-03-05T21:32:50.047727Z","last_seen":"2026-03-05T21:32:50.047727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x7f39C581F595B53c5cb19bD0b3f8dA6c935E2Ca0.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x7f39C581F595B53c5cb19bD0b3f8dA6c935E2Ca0.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 8083\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-1f93\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15861\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrCIJP11%2BxwvSM38HRlbH3Lnht5%2F75rRzk0MgclF8wPNw7Low2Ydsbwndx5jnXPhspjyfhuK0rt6zlamwXc%2BGGQQddiepAphwN%2BTT6K%2FjaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81af9e9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"544f2f573cd6c6b74708714d82c633be","sha1":"4f67738851e3e95c5e52740d5d585958252204f2","sha256":"e6ad0346ef2be8b9ace80f6ee423d462ea11fda99c318efe0f071865f6085d99","sha512":"b0a0f630b44aa9e300c79990987cc40119b76ed9bcd82fc00397f5b1f77f315b0137a533cc09b6a7a99d2af06f8b7c7e0ba9e306432a2add9e0f714eeb3eca65","ssdeep":"192:eSRsJpnhcEtZRahTddUp6Exh28isVgRU32CeHE:BwNhZZRahTd2UETyeek","tlshash":"d5f18e4db8c0721e5c37e94079d48082f542a38b1b85f8b97061e59b9ee3498dcfa39a","first_seen":"2025-04-06T10:35:33.722913Z","last_seen":"2026-07-28T20:00:05.358347Z","times_seen":138,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eulerfinance.run/0x6440f144b7e50D6a8439336510312d2F54beB01D.png","fqdn":"eulerfinance.run","domain":"eulerfinance.run","tld":"run"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eulerfinance.run/","date":"2026-03-05T21:32:17.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eulerfinance.run","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 14:46:59 GMT","end":"Wed, 03 Jun 2026 14:46:58 GMT"},"fingerprint":{"sha1":"5A:7E:45:73:9E:D2:16:95:F7:56:A1:09:F5:F7:CC:FF:54:2E:D1:4F","sha256":"25:3D:D1:47:2F:B6:03:6E:F4:7D:C3:CD:E2:94:84:74:A1:B5:DA:FC:EE:2D:73:BC:C7:79:96:C1:F8:AD:D3:11"}}},"request":{"raw":"GET /0x6440f144b7e50D6a8439336510312d2F54beB01D.png HTTP/1.1\r\nHost: eulerfinance.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eulerfinance.run/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Mar 2026 21:32:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11214\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 05 Mar 2026 15:25:34 GMT\r\netag: \"69a9a06e-2bce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 15862\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MrS5yO6LbsxB%2FMn5vxpDG18oWAr2JuwZNK2xdhuZGt2QcCuIq4l67HdCh3I8PXGC7ZaGQk22WdPIjvf1Tf7SLaseinxrR%2B365Cn6bI6uGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7c3b81e8169e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11214,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"ff272c7cabc88ec4ae2026c2dcb1f525","sha1":"d9149550e9ca93d973b0c51d407d55fcd0a626fd","sha256":"b022e55b8f25ec7412157d45840f376b41c27da98374e0b0a0623fd12365abe6","sha512":"32c98348f9b5a62387eff0f4f059cb626377b7280e6e6a9241aa5c96a2b96316c68e8960fd880c23b43dbeb8377c57ea665da5fe1bef3d24a72a9972b8f01f43","ssdeep":"192:bVWQ1neQuF5gmzOvzv7hCaC02OTRqKS3IOKZ3k2wgnXp92Ta9LIwbIeWOqBeP:btneVz6lFC0nRxOKZXP92twTq4","tlshash":"8132b04485f59e009b4c1b3a1f093d61ade39c15615caede30954f92f9a927be2a8020","first_seen":"2026-03-05T21:32:50.050062Z","last_seen":"2026-03-05T21:32:50.050062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"eulerfinance.run","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}