{"report_id":"3d398241-0526-465e-a2e4-848babeb84f7","version":6,"status":"done","tags":[],"date":"2025-10-11T23:21:12Z","url":{"schema":"http","addr":"euphorai-labs.com/","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"172.67.222.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"title":"Plesk Obsidian 18.0.72"},"submit":{"url":{"schema":"http","addr":"euphorai-labs.com/","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"172.67.222.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T23:21:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"uat-proxy.plesk.com","ip":{"addr":"34.247.148.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1999-06-13","domain_rank":0,"first_seen":"2025-08-21T20:20:46.51845Z","last_seen":"2025-10-07T23:21:37.928462Z","alert_count":0,"request_count":4,"received_data":4088,"sent_data":3164,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"euphorai-labs.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2025-09-27T19:00:03.935976Z","last_seen":"2025-09-27T19:00:03.935976Z","alert_count":42,"request_count":21,"received_data":6362337,"sent_data":10106,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"sentry.io","ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":135,"first_seen":"2016-08-31T05:38:44Z","last_seen":"2025-10-05T22:25:45.41849Z","alert_count":0,"request_count":1,"received_data":556,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/main.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cfdf6c360a03001952be3df8116c8e2","sha1":"7f54378a90705a62eae722a275f1e9a7223e9f90","sha256":"bf414591a4d851e67979c69483a6bb6c9da6911095199e07a48d44245a4b790e","sha512":"5d5cc11883b52117a01229507bbf04b34ed1750143ca3a4f9dd3b0ef34b2a2b7528fe46477abf8fd0d74e099432da4108a50f31a1654ef02916ca20e51ea7fb7","ssdeep":"6144:fIVv92zvErw8l2rK7GvF2Nk5BiqpdpoFMvdOP4h/QRYuhsVbIuR:fIVF2Gw3bF2+p7vvdOP4hwYuhsNvR","tlshash":"3e3594ab304476bb0eebc153986b794530f17276349a40987a3ca5dedb749482d23f3b","size":1109343,"data":"","first_seen":"2025-09-19T02:59:45.824742Z","last_seen":"2026-07-10T19:22:32.10758Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/externals/require.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3edb4f233e8aae8ef670fba6dcd1f4ab","sha1":"f56e4186ede065c605a2b58e7c4185bc978af4a8","sha256":"cf14ee85a07f7a5951826a0e63f6120fb68c6e4e1ab23c85ff7c0f5d75cb5a05","sha512":"cd03dd69c80fdd3729a379e55306c360206c213c5c9a81a29af13c669f063f927075631644ffd8a460b6ea5cf76889caea735df53a29ff0f8e318ce28f938d7f","ssdeep":"384:pv6/1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:MfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"3182faee3ae6f903b26222f4406f504e5377d953141cc144f619e8f5acb8568a6a3e3c","size":17753,"data":"","first_seen":"2025-09-09T02:20:02.456557Z","last_seen":"2026-08-10T06:38:27.085964Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89008f542ad682d475ba620ddb9d6af0","sha1":"a2d72dddb671332949524b2ccb50380709833be5","sha256":"2f0c7b94a5222da808b37dbc80003d24fcdd1cb38ef9700c624c51593e0771a8","sha512":"3ead18c08f12a7d188d5914dccb7853ee6f51874bb1022c2fda84a69c75db0261d7c08dccd2033bd36aea71165902b5f0e0ec24039a4c8e065aa363dee06cbdd","ssdeep":"","tlshash":"b7d0221d0da80412affeb08cef1322288cd3dbf2840b8841b2dd72995a2247a8348162","size":196,"data":"","first_seen":"2025-09-19T02:59:45.826409Z","last_seen":"2026-05-10T20:16:47.747642Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9615d7eddaed2a575c940a7c00cb415f","sha1":"1183f5fc7bd262f12c9ccfa3724283f99f9668e1","sha256":"f4df11c2224114e0d235ba52325f620d5a8c612470abeea57498454934f1ba42","sha512":"c1f02ea64780f24fae97032199fbd6d3abdac566be748257edc7d59c31cb4c0f55629fe4b2f35027eda3d4d9fb528b0ec6827984616b7a8e4e352ab2126ad387","ssdeep":"","tlshash":"dcf09e1b35828c3f3aaf95be36243e8a917c6807d7954899a69f832047f59b0042515d","size":485,"data":"","first_seen":"2025-09-28T13:19:43.870708Z","last_seen":"2025-10-11T23:21:19.889422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/notifier/global.js?1758177350","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","size":18383,"data":"","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-27T03:09:07.377939Z","times_seen":1232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/vendors.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c45773ae341d77dec379c4d6599b86e2","sha1":"9350de797b354bdc5c5f0220bbdb95c855a882dc","sha256":"d1fb96435e8b8fb9df004b06d6f688104d5211183b9515fef6d49fa2a07bc25b","sha512":"a47a819713604187c5a8103ece228c74d40d4c48aff06efb453affb1e79d1a2816f57d8bf31893fdffd3ed5b5dd27d845c05afc21fcc27b54aaf75ac2eb42f8b","ssdeep":"49152:hvDuWRNuc6D0VSgXwVfNmlBH0ZF0hZUGSNsXOd7gkwf+uZqXu2SAHZ9js5Og1fJO:xuWbuCs1gkw+X4pA","tlshash":"57f54ac931d1b07653e361a9803f1107f23a1969644dc4a8b678d8ea6cf9c8d627bf3d","size":3348579,"data":"","first_seen":"2025-09-09T02:20:02.486351Z","last_seen":"2026-07-10T19:22:32.106116Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba9671892ee40ef730a9de509f739aa","sha1":"fb9d10e170d9e076a15dafcc6f6c72c7e6dea4e9","sha256":"89e0312bdb2d175a6b1fe8e30843f86a88f45354029b304c48baa69a776df696","sha512":"90c16df095fd6dfb29d4b592e9ac8e5731fd3c76d70aaa75d2f22d4246e15f8d2871c83d0db7c6ffa110d094bb7cebbced39bf6b6333ae38e8ad723f133281f0","ssdeep":"","tlshash":"f990021428665155d485402115467411a59639ae54172e61de145765178609142685e4","size":51,"data":"","first_seen":"2023-03-08T15:21:27Z","last_seen":"2026-07-18T09:57:56.233022Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"151709f59ebcd603bd5902e2c5bd3aa3","sha1":"f277b0aaba9e0045c7d336b1d9fb727642271edb","sha256":"65952b201392634ec930ff43510ac92b8e39396d5794d08bc88aaa1c1f7e857c","sha512":"7040b2aa34ffaf81d04a4ac005d78171cf05d2bbded9f462eba68e26e7b5955a3f00f609ee92c977e39a753749673acfc590d20883743d9fe81770343b219bfe","ssdeep":"384:Y965AtKbrx3WjujWIDuNMAK5IjMmCjz1HVoa:Y9CzrYjaNDS7K5IfCjF","tlshash":"9dc2d61964083f3b03cb67d27c5b168e77b8109191d4584848fed93806aef9aab3b16f","size":27519,"data":"","first_seen":"2025-09-28T13:19:43.881484Z","last_seen":"2025-10-11T23:21:19.892009Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/externals/prototype.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","size":96954,"data":"","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-08-11T13:00:56.770584Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/plesk-ui-library.min.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c60b34c88047c34d03e943cd17bdcb10","sha1":"b00a5eb239f13ba4cd96821500304f4fb82a9866","sha256":"441cc58f37d45f6fba54ef6f3e8ea39241c01dd06d82efb7830a4d7ac490f39b","sha512":"275f225236711bfaa2f02195decc94e66a8067445d9773174c3568f9ed57285bcf982c6c186c1ba2cbedaafc1953278365d637c1e080b826cb729e6e44ff4821","ssdeep":"6144:tcC5e9C3snlRsHkUMqDBljvmABom/2HlwgUyNVbCwlKfwwN8v4PoyJCKdWPZpb+9:tcCOROMqDBljvmVQPLU+yDrsQrpAYapl","tlshash":"81e45d9070c1f4e916e780d5406f5409b6391d2de40e5ca0bab8eccd25fa85ab17bfbe","size":667885,"data":"","first_seen":"2025-09-09T02:20:02.470266Z","last_seen":"2026-07-10T19:22:32.101998Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/letsencrypt/global.js?1758177263","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","size":728,"data":"","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-08-11T13:00:56.745048Z","times_seen":2063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"34.247.148.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\nReferer: https://euphorai-labs.com/\r\nOrigin: https://euphorai-labs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-length: 20\r\nset-cookie: AWSALB=QskUCMJGbNX1Y5OMT1oPgWKO6OMCK9LXeBwsNpPo92zUrKdbCu3lCPVJzDcdXMgwO4/Og0V8Wg98imv2B7wAfObVRh0bTw5hMHszOGuJBfLXUpTbIAiGHD1ik5hf; Expires=Sat, 18 Oct 2025 23:20:50 GMT; Path=/\nAWSALBCORS=QskUCMJGbNX1Y5OMT1oPgWKO6OMCK9LXeBwsNpPo92zUrKdbCu3lCPVJzDcdXMgwO4/Og0V8Wg98imv2B7wAfObVRh0bTw5hMHszOGuJBfLXUpTbIAiGHD1ik5hf; Expires=Sat, 18 Oct 2025 23:20:50 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\naccess-control-max-age: 172800\r\ncontent-encoding: gzip\r\nx-amzn-requestid: f0495b77-a714-a505-912d-b3e5cbd9c90b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":131,"dns":23,"connect":33,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/images/symbols.svg?c93dbf4e8547363db109","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /ui-library/images/symbols.svg?c93dbf4e8547363db109 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ettt5FpFnRA5iV4nFuIstfCFj0ww5UOtHgTZyh9%2FvHMKSYQXsNCdFRN95ipefgf1dWYOsHhaIsJQiQ3ebOwjvYoj6cRoHVvIxLWXtmDzGrFv\"}]}\r\netag: W/\"68c79de2-47337\"\r\ncontent-encoding: br\r\ncf-ray: 98d217256b75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291639,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"499cc33c42abfb5485666b7d4016fbb1","sha1":"8bc6aded0acf1cdbe4cd1a94189e852edb06a25e","sha256":"e8fd13692a15dc7b03cd7a0a926fdaba4b276fcabb2b28ff04efb587542960f8","sha512":"189f779777fadfe7331b36393d9dd2fb638e76bb22b851e48dc68f4e9f134e1d4d020c43fcfec628c879a2e02a056817526190691948a5d9894cf73e71408b2e","ssdeep":"3072:BGHcIZBsSfBUp1pIcNceSHD0jgULLLm7I7rgiCzAwpoQGF4sUrUSicuca8YzgcL4:BGDfBh9aCztq7/YaU","tlshash":"87542eb907bcd2dc2547c63aeb3b55e0571ea4bfb1b6c0a0396f8b704b53061d6876a0","first_seen":"2024-05-28T06:49:03Z","last_seen":"2026-08-10T06:38:27.094531Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"34.247.148.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:51.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Amz-User-Agent: aws-sdk-js/2.1692.0 callback\r\nContent-Type: application/x-amz-json-1.1\r\nX-Amz-Target: Firehose_20150804.PutRecord\r\nX-Amz-Content-Sha256: bce187f8ac01b1cc101a4b2f9c404ec05826a9a757af326d90a70438d709a354\r\nX-Amz-Date: 20251011T232051Z\r\nAuthorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJLXPZPYBFL/20251011/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=fc9161426fff49e49819b224e5ca848e6f3fe3f30cac53995a0d128babe41024\r\nContent-Length: 290\r\nOrigin: https://euphorai-labs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:51 GMT\r\ncontent-type: application/x-amz-json-1.1\r\ncontent-length: 246\r\nset-cookie: AWSALB=QmSYOzz/3K8NgF+OXQTckQde2uAnpZuQ+EwGAn/EAmZNfXAgRMkupRd1gnhvBfaKg8s7ZxdMzh6uqsafYsWJiQ652nqNA4GcyejVIuy4ovCJaWi0fbItRVUHUwfi; Expires=Sat, 18 Oct 2025 23:20:51 GMT; Path=/\nAWSALBCORS=QmSYOzz/3K8NgF+OXQTckQde2uAnpZuQ+EwGAn/EAmZNfXAgRMkupRd1gnhvBfaKg8s7ZxdMzh6uqsafYsWJiQ652nqNA4GcyejVIuy4ovCJaWi0fbItRVUHUwfi; Expires=Sat, 18 Oct 2025 23:20:51 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\ncontent-encoding: gzip\r\nx-amz-id-2: c09cG71+Bcqms51QzcoM8ooZqMSTVQCJjx9TeZWuZ4QttKlkBygHKdOdY436KLDHAFj7x1s8HwhoCWfEnD4gOcd+soCKy8Mf\r\nx-amzn-requestid: c8ab30a2-6370-b113-a9cf-d831f18f78dc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":257,"size_decoded":0,"mime_type":"application/x-amz-json-1.1","magic":"JSON text data","md5":"67984ebea078d00431b292118c792c59","sha1":"ab877f72f4a4bffddb31dd54375f5d3dc877729b","sha256":"2d9f5f080324d5ef91ef94032fcee61d92453d236330a97112bed7e12c27682f","sha512":"392ac24897fc05c26c96c15f9cb58957e6dca7aa9641dc67098944363dc32cdf7161ef0c075ea1071f6bfbf0b2c32f384e269ea9dcaef103acd8c4cc68d8dbe6","ssdeep":"","tlshash":"bfd095bc1d0977cdef06811554510b212745e57b0115152de05493c1dc270fe51046e7","first_seen":"2025-10-11T23:21:19.86148Z","last_seen":"2025-10-11T23:21:19.86148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/theme/css/main.css?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/theme/css/main.css?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-57a8d\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIPVy6o3xT2uWYnlUce%2F1PmfpmLAqvtr3gq8%2B92RJGUQW%2B4FAbW0aHINYn5nerX5bR3aBL441cxWacf25eHnraRV9a44mjnYci6xdbPH2yea\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d88a5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0141ec20ed4ec3fe206efda3b1a08474","sha1":"77233509a2a23ba1660a2ad0c599202a6fcd24b7","sha256":"96c35cc9e8b3323cb7a33dcc81a4bc346f00573ad782c30661b6b3f81ac4ba4e","sha512":"533c7d990d747b34b10789bbb4220bb7287b5cd1d26ef4eb7674203ee8150b5db049b85be1d573ba9477934eed4a1791f30f3c2d581ac39c7622104702d05752","ssdeep":"6144:S6eSCdHO33ag+Y3i1OVR4GDu88aag88Sb4I:2HOvikHpI","tlshash":"78743d50f05931bd766b872af3e12a45631e9461e2525ffff46bf2acc2c90c41633a26","first_seen":"2025-09-09T02:20:02.477152Z","last_seen":"2026-07-10T19:22:32.073112Z","times_seen":71,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/plesk-ui-library.min.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.min.js?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-a30ed\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGJQcgYWATcneiscOlVAWwPXaM4Vtp3Vi8uPeU5mxfioa0cNCu4wGBMLzlD2uqJGPvvRtLHbp8g02LtvGosRB3vyl86G0waddgBU69Z21rZr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98b6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35092)","md5":"c60b34c88047c34d03e943cd17bdcb10","sha1":"b00a5eb239f13ba4cd96821500304f4fb82a9866","sha256":"441cc58f37d45f6fba54ef6f3e8ea39241c01dd06d82efb7830a4d7ac490f39b","sha512":"275f225236711bfaa2f02195decc94e66a8067445d9773174c3568f9ed57285bcf982c6c186c1ba2cbedaafc1953278365d637c1e080b826cb729e6e44ff4821","ssdeep":"6144:tcC5e9C3snlRsHkUMqDBljvmABom/2HlwgUyNVbCwlKfwwN8v4PoyJCKdWPZpb+9:tcCOROMqDBljvmVQPLU+yDrsQrpAYapl","tlshash":"81e45d9070c1f4e916e780d5406f5409b6391d2de40e5ca0bab8eccd25fa85ab17bfbe","first_seen":"2025-09-09T02:20:02.470266Z","last_seen":"2026-07-10T19:22:32.101998Z","times_seen":92,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sentry.io/api/1327420/envelope/?sentry_version=7\u0026sentry_key=50365a6fe24f4ff28f6b625410e04a35\u0026sentry_client=sentry.javascript.browser%2F10.4.0","fqdn":"sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:5D:97:97:7A:AA:2D:23:D7:21:D1:D4:EF:2E:3B:0D:50:F0:11:3C","sha256":"F3:73:7A:50:D7:AC:5C:4F:8E:94:6B:EC:E0:EA:D2:F8:6F:EE:EA:F8:DF:BA:97:5D:92:0E:ED:DA:82:D9:6D:BA"}}},"request":{"raw":"POST /api/1327420/envelope/?sentry_version=7\u0026sentry_key=50365a6fe24f4ff28f6b625410e04a35\u0026sentry_client=sentry.javascript.browser%2F10.4.0 HTTP/1.1\r\nHost: sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://euphorai-labs.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 430\r\nOrigin: https://euphorai-labs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nx-envoy-upstream-service-time: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-12T21:51:04.398492Z","times_seen":759544,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":95,"dns":0,"connect":12,"send":0,"wait":137,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/theme/images/logos/plesk/logo.svg","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/theme/images/logos/plesk/logo.svg HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/theme/images/logos/plesk/logo.svg","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/theme/images/logos/plesk/logo.svg HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HahaxWGRc2ScjbJxavJU6Ve4VZiWNXQc0Sm0VX7JzbnwjiLuu74d96fLTh4zXbPygEglky8W5M4i%2BNU8G6pvAyYGN%2FMOb3dfalYSIh0PFsJJ\"}]}\r\netag: W/\"68c79de2-aa8\"\r\ncontent-encoding: br\r\ncf-ray: 98d217256b73723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9360d7ea139bd99ace88e0b99ec9429f","sha1":"542ed6c0c25874845c57a2701340eb327e926458","sha256":"372daa2218a79b1c3ccc8f83cd3f2ac98ce624a7c50e9478f997b631468c6bd0","sha512":"42c1d9ca33d2c188c87eb56b861feca28ec42eb699d5c3ba94a50dde40be3345f1eb09e3c5d792a3e4fc5b300a56b32719f75020b5e5c1881f79fd9fe0f134a5","ssdeep":"","tlshash":"e05167f71330c35c84cba4baef3ae944920ee47dbba34681829ed61468c3995f607954","first_seen":"2023-05-08T09:08:30Z","last_seen":"2026-08-11T13:00:56.749905Z","times_seen":1978,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/ui-library/plesk-ui-library.css?1757912546\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61548\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: \"68c79de2-f06c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1NEYeHLgiD4Q6KVOzxzrf44XkP%2FDjUJU2TuOnzYLzu9ya6LQxCXdFzLn9NKulAQAje7Arf0votrzpLelO9La9oZusCVHDFuLsYZDYi2UlBp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d217257b85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61548, version 1.0","md5":"e9681ca3d29d814a5621d4764dd1a11e","sha1":"bbda68459fc0531b915bdf9e524ecc8f782db0aa","sha256":"51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456","sha512":"f03e8536b40002c4aceb759f4e3cce90277491e4ed1b0d9c3b061d36efe8328545765e2d391a22bdd1e1d3d1e94e50ad4b18f65339c6ee0d22c02316869d808c","ssdeep":"768:/h88uQaIKMZe9H1M8KzcxRsmUYwKDSJIVeOFd+h63Lm18JXdHEAfeckzRA7Hi8:/hFSFMU9YImWvKQ2ikabi8","tlshash":"a753f1b07b32e55bfec639739a6d6311d2135c6e8b0705f642b8a050263f12babc459b","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-11T13:00:56.76343Z","times_seen":3551,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"34.247.148.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:51.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\nReferer: https://euphorai-labs.com/\r\nOrigin: https://euphorai-labs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:51 GMT\r\ncontent-length: 20\r\nset-cookie: AWSALB=e9d0hRw0v/9g4z4QWf7po0L5PWFwDrm56UCJg55UQfva6iK+z5/wd/OydU7zDEiSJM7/uc82+ogNqO6fkmSW5vZPaOWUy3kbWOZKkbIt99N3nFMB7RPoskUnPkhQ; Expires=Sat, 18 Oct 2025 23:20:51 GMT; Path=/\nAWSALBCORS=e9d0hRw0v/9g4z4QWf7po0L5PWFwDrm56UCJg55UQfva6iK+z5/wd/OydU7zDEiSJM7/uc82+ogNqO6fkmSW5vZPaOWUy3kbWOZKkbIt99N3nFMB7RPoskUnPkhQ; Expires=Sat, 18 Oct 2025 23:20:51 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\naccess-control-max-age: 172800\r\ncontent-encoding: gzip\r\nx-amzn-requestid: ffdd77e3-3189-2c33-9eb9-9f70e33a261c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login_up.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T23:20:49.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /login_up.php HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 11 Oct 2025 23:20:49 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHJYLXiTD7L8Dce9GEvSnjbJ7LRwew7qrX6HNMA%2FljREPgb2mI7Bv%2BHHTBrS2jyBzxiLYhWv5xZ5UmxYUGRZmqRDpSkXK9gh%2FOQdO24X3K06\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d2171aed0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30665,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27495)","md5":"a7ace50d8d79cce6bbe088e303a6f361","sha1":"c0c164eea014c75e29eb7f04424163ab27eb352f","sha256":"84e9c7dc6a78f24b81d28c2a2801a599c160750e7ef9848cb2e87d73e627ccbf","sha512":"77631408f3e306bb0e03f6516f64e4dba513b1a0f8f59360c3490165dc2e09aad974526f4bdcb2b1cd89d05d16832cba4ed5862801aea2fda3e090926af6ede1","ssdeep":"384:stlvQs2VzO4j965AtKbrx3WjujWIDuNMAK5IjMmCjz1HVo5:stlvQs2VzO4j9CzrYjaNDS7K5IfCjM","tlshash":"fad2e71a28047f3f03c767d27c97654e77f8609181c4584498fed93807eeb9a9b2b26b","first_seen":"2025-10-11T23:21:19.869502Z","last_seen":"2025-10-11T23:21:19.869502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/vendors.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/javascript/vendors.js?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-331863\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lz2YR6exe%2FdFsazfN7rD8jVky%2B2WnwIrGvoFIuPk9wabwCRvFOrUHcInHANhrJh4vAndTuZYxJKPtBP6Ke2i0cADf6cPn1Idp%2B2PqpRaxv5d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98b9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3348579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"79ca22be167ba69a73e8b73cb4d4ba93","sha1":"3ad8880256cc2a135ca3e01f6a6287b7cbd28fc5","sha256":"243767aa43e332c770b699dfc3c642f8b8f6899ce6f9558e08dc83faec6c01c4","sha512":"e82b4e20978097dd5845f04e818caa533ef9ca243946a86a2bb83cfe0cb4ab5fd1d76d1b664578c70480a05e7088718b7cc6998d9278c86019ff00f8b6ce8769","ssdeep":"12288:YmFv0QuWRY1LgoRRnRS6D0iiSgXwVfNmlH:YmFv0QuWRY1LgoRRnc6D0VSgXwVfNmlH","tlshash":"6d2529c932c2b47257e352e9807f0106e33a1859744d8468b7acd8de78bd94da23bf79","first_seen":"2025-09-09T02:20:02.472388Z","last_seen":"2026-07-10T19:22:32.085186Z","times_seen":91,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/images/apple-touch-icon.png?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /images/apple-touch-icon.png?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 4528\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: \"68c79de2-11b0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIi0RjSmoCxTClIbAY6ADRq85x24Cyv6R5VxudAHdfDv3twcx88bMapcmZEt%2B2txu9ZBvaLxEGXQZ9QlCkmU%2F%2FioRWL55RWRR4m6AbyHG02m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d21723d97c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ebbd61fb584cc8ae62ffa726070c952f","sha1":"7aefbffc866e859207b23f736faeac97f51414e6","sha256":"b23ec702f16e22329aa8d8a74cede38c886e609acd467517a004439cbbb1da1c","sha512":"f25e44b2827d8131d7264ac6d89c1da95b452111d92f8681b001145283cd505b7fc72f637b72d94a550247284f15d9334f4e4b8802e795378c8c6483ae68fb73","ssdeep":"96:LSlwpX/RP3oYm4HoZtygi8U/q8fDdOY0JkLTRR6U5/3:LSlwJ/RP3oYmJW7t1Dd0wTz6Uh","tlshash":"fe919e6c5303d6786bf82488136e65e5d24a76627c5397b60ea41b1e2cdc38afbc5cf0","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-11T13:00:56.771187Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/ui-library/plesk-ui-library.css?1757912546\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59600\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: \"68c79de2-e8d0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQiCXCBdAEZL1wyAYqP%2B5%2FYBN88nd57Yf0HGLNXtoJMPI%2BmPLeBmi9W54Rru0D0tnrQ1w7Mi212VZ0nKgtzJ7OUkPSIi4gW14f08YnscrR17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d217258b94723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59600, version 1.0","md5":"e78dce533ecee30c5efd812bb23c248d","sha1":"87d988c2f0343952ccded7c17b000e33db6f3d15","sha256":"03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e","sha512":"84ef89585b92b235ce6d0288f2a52cd894a074bf23c29e06927ad7e3a5316bd97069b69a5246acd1d9eb6beb42b85866a1109d9591300746f11c515d959d82b8","ssdeep":"1536:OOgE9AeA+6fIVtMLSaRUArskS2m21Cgbv+M7+Do/N1:AE5A+6ksSaRPAHw0ov","tlshash":"4543f1155519c890cd26783c89b9aee180b06eb4c2480ef76f9c3685fee1767f6137a4","first_seen":"2023-04-06T18:57:36Z","last_seen":"2026-08-12T21:07:37.319031Z","times_seen":4802,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"34.247.148.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Amz-User-Agent: aws-sdk-js/2.1692.0 callback\r\nContent-Type: application/x-amz-json-1.1\r\nX-Amz-Target: Firehose_20150804.PutRecord\r\nX-Amz-Content-Sha256: 8e732b550f14a04202ef93beb1a6733032606018360d3836ac96fc153177c604\r\nX-Amz-Date: 20251011T232050Z\r\nAuthorization: AWS4-HMAC-SHA256 Credential=AKIAR4YEYRJLXPZPYBFL/20251011/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=cd4f87fb49362fe4eedf5838805219bd379076c557f18fcb7f748f1a65412639\r\nContent-Length: 214\r\nOrigin: https://euphorai-labs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:51 GMT\r\ncontent-type: application/x-amz-json-1.1\r\ncontent-length: 245\r\nset-cookie: AWSALB=W/p+sY0kqPSQ/oz9if3GLEgTXJLD9GkT7+qeD0zKC22OE/acXiLjf9eqodzfWfro4QPiBNd3kI2Ke/3hhmDal9AFlkbj4xVtQj9HYQrSCDKQrxCzAHPUmEoKNZYu; Expires=Sat, 18 Oct 2025 23:20:50 GMT; Path=/\nAWSALBCORS=W/p+sY0kqPSQ/oz9if3GLEgTXJLD9GkT7+qeD0zKC22OE/acXiLjf9eqodzfWfro4QPiBNd3kI2Ke/3hhmDal9AFlkbj4xVtQj9HYQrSCDKQrxCzAHPUmEoKNZYu; Expires=Sat, 18 Oct 2025 23:20:50 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\ncontent-encoding: gzip\r\nx-amz-id-2: NXFEQEKvlt6KAw9498bTnKKOB3q9Pha/OX6ix2v0BhyiDzKpeaIvRX2q8UZmRQthocRXTGsPY1sOn0375deb0nOVsvw+pPN5\r\nx-amzn-requestid: ce2dca12-061d-8e83-af49-2281d4ae84ac\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":257,"size_decoded":0,"mime_type":"application/x-amz-json-1.1","magic":"JSON text data","md5":"739324e5bcb73ed2005ad5a55d0b3875","sha1":"aa1e2224aafebb3cd79c04f00326da2609578536","sha256":"346c10f7fc850ebf44a4024ed83ae2147ea9f87792312092b1429b0f10046fe5","sha512":"3e7c17cbbf6bbce1ba0c01a9f0f0a707e018dca3270bbd472704cca26e22b1d4438c837783789b991271fbd564cd787183d6c24037633862f276a496fc276cdb","ssdeep":"","tlshash":"78d02b457944354ab4154ac145f525d49200bfaa8587d14bc108531ad6b1b2acab1873","first_seen":"2025-10-11T23:21:19.875348Z","last_seen":"2025-10-11T23:21:19.875348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T23:20:48.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sat, 11 Oct 2025 23:20:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://euphorai-labs.com:443/login.php\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 11 Oct 2025 23:20:48 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWzhtp4xFHFo6EYrTBtVxnhdD5MMqnFM0wjsAiOuoBpXivs3u371DoxonRroCy7MqRapaZxbmH%2F489ntuRHSmNjMSJSi2c9%2BofakHkEYQQ%3D%3D\"}]}\r\ncf-ray: 98d21718d98356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30665,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":249,"dns":25,"connect":1,"send":0,"wait":153,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/login.php","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T23:20:48.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://euphorai-labs.com:443/login_up.php\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 11 Oct 2025 23:20:49 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR0Mz82We64Lx8wTll%2FSy0y%2Fv3QygwLCYLKEmfuPq%2Bu9Z3bxtYWO998lAUmAVztRrvnMkPFw7egjgdQEp5KLwgZ1xj528ZAiVoNVsCWcXQ%3D%3D\"}]}\r\ncf-ray: 98d21719ea1756af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30665,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/letsencrypt/global.css?1758177263","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /modules/letsencrypt/global.css?1758177263 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 06:34:23 GMT\r\netag: W/\"68cba7ef-2a4\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrF%2FcRQthF9elx28AuKq%2FH2PlXXcZa1%2FPxLQoe3GpvuNY2HwNdAiJMA8cN973Ue69bgfuHEp51nSdvN2%2Bs2FHn7NaP6fIQrrX02fuVIA%2FwHB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98a8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"50186bab48df0fb765c5e62893fcf211","sha1":"5dafe8f3b22fbb0776758d7ab6c81b47c68d119a","sha256":"f1b7502665bd7cb890a9d0d3f7d0aa377b7adfbb03f9f8101a2aca3cfa3532fc","sha512":"c7a8cf632c28a059ea865f67075e3559bce1a459a97f1529e7a5d67da03c82a65c035eaf32f819f0463702c62fab6d0fb90bc5eb1bc91fe126be185756e4b9de","ssdeep":"","tlshash":"dc019e62d7672cce7a1590691f64c742631c681fc015d72dfad8f65c4f8b054fa32762","first_seen":"2023-04-06T01:25:59Z","last_seen":"2026-08-11T13:00:56.755663Z","times_seen":2344,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/digitaloceandns/global.css?1743593160","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /modules/digitaloceandns/global.css?1743593160 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:26:00 GMT\r\netag: W/\"67ed1ec8-1de\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbVHHRPrSVC9Go3WcPiNyrPtWOCpNcoPm1DIibGHh5bZz7u5IsQAhNN%2BAcQoNwPzJ5oXefR6Lb2SxD8WqjzLOlKPL7S1rc3QzENYYeMM7Tmr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98ae723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"356697a1931ed19c037afafd85b6b541","sha1":"e55d25ba2faa0ac0bf1f9c310030af00937d2354","sha256":"b6c5cb3c4e9dcf4109a823bf71582540fefec3011c2628a1258f5b2d48fbe0af","sha512":"f5e8729320d5fba0d51885fa0cdb331754c582b6a0d6107d644cddd966a129a44a6ff00138988a828cdb8ae0a29d0d87dbea2c9f01bd39160b633483c3fae9a6","ssdeep":"","tlshash":"3ef02e437c75010a680554e8febf2708191842271317def57de428cecf4d9f145d05c8","first_seen":"2023-04-30T01:33:51Z","last_seen":"2026-07-19T19:32:49.455161Z","times_seen":92,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/externals/prototype.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/javascript/externals/prototype.js?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-17aba\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeaplYAz4KQFJ0WsfQZXr7QjAHdjd0TXmcOv7MbTyTfVQVkFZe%2Fy%2BUaOENZ0m%2FhGrbae%2BWeznTGQobIwB4ZkANP%2BWGhr3bzELFUZRrw0TCUD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98b3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60866)","md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-08-11T13:00:56.770584Z","times_seen":1091,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/letsencrypt/global.js?1758177263","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /modules/letsencrypt/global.js?1758177263 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 06:34:23 GMT\r\netag: W/\"68cba7ef-2d8\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2M%2BvhoNXnYmDQIt9s6SxeqQW1Y7cDYSirmPc2OdE%2FOUuXdQjXaXe0rDGHwAa8HbmY5xZA8ycrrcpW8Wjc2aeiX6gOsx4ev0%2FRq3eYzsVz0Rc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171da8ca723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-08-11T13:00:56.745048Z","times_seen":2063,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/modules/notifier/global.js?1758177350","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /modules/notifier/global.js?1758177350 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 06:35:50 GMT\r\netag: W/\"68cba846-47cf\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cq3FTmCd6euads0hTbpmxxWWygQ%2FBzUvmfTx8tL3zJuyKqZIW56GhIqkXTAW4XVUq%2Fzsv9gUJmlV33ODZW8h%2FetBquHA21vzMjezbc4SdiNn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98c3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18319)","md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-27T03:09:07.377939Z","times_seen":1232,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/ui-library/plesk-ui-library.css?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.css?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-347c3\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlmXD%2FWP0Y7zJu4pWpafJVguuaapypPktasnz%2FAMPt0hup4PTKpAou2oB7tCTZX1TiAcRDYO7j7hOlPOCXM7FcGtB0s8ZNK9UllWAcJAw4g3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d88a3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214979,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"77fc72e3696bf664b03c0b7d5c9b990a","sha1":"2bc7d8e59442608aa3a926b00acae082d032be6d","sha256":"6cdb25194fce2aa28501291815c815b9d7f47b5baf58bff81a0c55ac64e51c9a","sha512":"a5aa5f8c72bd0b1c8858a56b22b06c70ede379269245ebc33a3b87f3bdff2cbabdd510e9b460f6c8fb87be6ae0a8cd5318b37c022d5ca57591473cf37089f2b1","ssdeep":"1536:q4i2g3u1uRu6smfL10mfeaVaPGpGoGWGqW40K3NFpb/eQ9+:ap0mfeaVaa9+","tlshash":"c62462d1e540353e3e0fb7b971f1a99c62086a81ce52dbdef098e31c86c16d389e6d19","first_seen":"2025-07-16T05:33:26.000499Z","last_seen":"2026-08-10T06:38:27.090069Z","times_seen":581,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/main.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/javascript/main.js?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-10ed5f\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OCoyxpAnXcPWFQROKODE6kcB0YpYJxApfT9XTsB5qPyFQ5fdOle6PvzVcSq0WCR1S7I5Sd7dM9R9ie7ArZn4p7Rl8%2BopPF3IfAwl5PWbqh3a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98bb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109343,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8654aabc5e5d0db1a9b87b632d3a6a03","sha1":"fd7680e96d2d40862d313f549ccb76d2b3d0a6fa","sha256":"ce1476c04db73d2814991d7e5b34b6c30634fd8b12ee1f1d74bd6cdc0713dffa","sha512":"9a56a6688c9383b8999dc9a8fb26691fbca5f943f3ee2c97b9d35f56d3ee64d25281dbe3152f68114556320ea7f28e83c7f9446e533421bfb4391e01ce922d7c","ssdeep":"6144:fIVv92zvErw8l2rK7GvF2Nk5BiqpdpoFMvdOP4h/QRYuhO:fIVF2Gw3bF2+p7vvdOP4hwYuhO","tlshash":"fb2585ab344476bb0dabd163886b754530f1723a349a00987a3ca5dedb74d482d63f3b","first_seen":"2025-09-09T02:20:02.465287Z","last_seen":"2026-07-10T19:22:32.097401Z","times_seen":89,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/cp/javascript/externals/require.js?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:49.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /cp/javascript/externals/require.js?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\netag: W/\"68c79de2-4559\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uqEyujvF9NSU8X6LGUnrr9Fpptz5B82GS4Q42sBK%2FgsSh9%2BkxzogGAY%2FUHCkQC61XjPlN1jVs7z%2FGHa0T3AO0wFkaNDeEbne40FnKXakrJJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d2171d98bf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17551)","md5":"3edb4f233e8aae8ef670fba6dcd1f4ab","sha1":"f56e4186ede065c605a2b58e7c4185bc978af4a8","sha256":"cf14ee85a07f7a5951826a0e63f6120fb68c6e4e1ab23c85ff7c0f5d75cb5a05","sha512":"cd03dd69c80fdd3729a379e55306c360206c213c5c9a81a29af13c669f063f927075631644ffd8a460b6ea5cf76889caea735df53a29ff0f8e318ce28f938d7f","ssdeep":"384:pv6/1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:MfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"3182faee3ae6f903b26222f4406f504e5377d953141cc144f619e8f5acb8568a6a3e3c","first_seen":"2025-09-09T02:20:02.456557Z","last_seen":"2026-08-10T06:38:27.085964Z","times_seen":374,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euphorai-labs.com/images/favicon.svg?1757912546","fqdn":"euphorai-labs.com","domain":"euphorai-labs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://euphorai-labs.com/login_up.php","date":"2025-10-11T23:20:50.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"euphorai-labs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 20:03:13 GMT","end":"Thu, 25 Dec 2025 21:02:06 GMT"},"fingerprint":{"sha1":"73:D2:4B:09:3A:89:6B:DE:E7:AF:BE:3F:80:EB:3A:28:C1:88:E5:2C","sha256":"75:FB:C8:5C:CF:8A:6D:47:51:05:F3:3B:F3:7E:CE:E2:8A:9A:3E:B2:2A:E2:66:A2:B2:1A:DC:D6:E4:9D:64:8A"}}},"request":{"raw":"GET /images/favicon.svg?1757912546 HTTP/1.1\r\nHost: euphorai-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://euphorai-labs.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 23:20:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 05:02:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdvG7qBCppI4oaYETKYoHpQAwazJJ%2F7o%2Bc%2B6YI20%2F2RlYZSF5zioo%2BhTnD5mwnlpyWF1R1hwPFK8%2BkvYKiCQGB537BFnTBrdG0rcyDhr97AS\"}]}\r\netag: W/\"68c79de2-27a\"\r\ncontent-encoding: br\r\ncf-ray: 98d21723e984723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db793b2c015d7c858962cd0d8e6df16","sha1":"4ff02cb7383ec6ccfa2f40aa98e8a0367d59233f","sha256":"a3226d3734644e6cee2791e42f6cdb81df5a773b39177bfcf00618961628dd1f","sha512":"7ce8d6eb9670d1b5fb81e3ea6877f20856f3c9ee6b6af5cf340bb10d2d87dfc3fd6b8e2eac5754d9423a2edeaa3da009b7d205bf50eaf634d411a686cdf7f273","ssdeep":"","tlshash":"8bf0a2e11764b18d89990f75df3c7aa4491d74f9724c04d1b68c4c64708faf9ed81e80","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-11T13:00:56.746628Z","times_seen":2176,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"euphorai-labs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}