{"report_id":"505a8e09-4e72-471e-a625-ce4813c110e2","version":6,"status":"done","tags":[],"date":"2026-02-14T00:17:56Z","url":{"schema":"http","addr":"cyraai.app","fqdn":"cyraai.app","domain":"cyraai.app","tld":""},"ip":{"addr":"172.66.41.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ai.cyraai.app/#/login","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"title":"CyraAI","dom":{"size":15626,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15626), with no line terminators","md5":"94869da2c50585fac14b3b3276c6999f","sha1":"f33eee25b503626e855cba01d0cacaaa76b6cc85","sha256":"e6fa058c4ddac5e201cdfab273799b1fab188fa8675f3747a706de34636c2100","sha512":"003c7ffb3a9fe6b8fc9aa6413ac87b0ce99f27785a3bdc6b88c8ff963a61de088b8ec2274fee1ef7af82153114094687206f89ec912ad438c783333232188519","ssdeep":"384:GgdLR92DwVuGH4RETdxEghyxMSz8qrsgXX6X:GgT92DLs4YrErxXoiL8","tlshash":"3562cf78050e8b2fa6a6efe8e928a71d9fddd21cdd301888d52877045dc6d02cec3522","dom_hash":"domhashe6d8033a68d12d08077bd3894a026249","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cyraai.app","fqdn":"cyraai.app","domain":"cyraai.app","tld":""},"ip":{"addr":"172.66.41.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T00:17:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"ai.cyraai.app/js/chunk-vendors.ea9aa0c4.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ai.cyraai.app","ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T16:20:40.737345Z","last_seen":"2026-02-13T16:20:40.737345Z","alert_count":60,"request_count":12,"received_data":12604952,"sent_data":5358,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.cyraais.com","ip":{"addr":"104.21.85.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-02-13T16:20:40.743715Z","last_seen":"2026-02-13T16:20:40.743715Z","alert_count":0,"request_count":2,"received_data":3597,"sent_data":1126,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cyraai.app","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T16:20:40.738947Z","last_seen":"2026-02-13T16:20:40.738947Z","alert_count":4,"request_count":1,"received_data":2161,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ai.cyraai.app/js/chunk-vendors.ea9aa0c4.js","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4478cf551725172e645295ae51f1fbf4","sha1":"981926bc59be4267d6a5435d9ef4980a9a467634","sha256":"f3e2a5709d2629e745d34ad8c77b255d0639733c2315e9559671edb1f15d7cfd","sha512":"ffbe2b8f758f3c8c3165404486888275782d444b7c868ca420b1d9ff7d81d0ee2e3a3c25c259a79a4dff953d1a0ac3b54fd4ef7d44fd2201f156f8b927f82b4d","ssdeep":"49152:ftpSpybfXPoGg3omDo9W+8p2IzofDFkiO3Se8Ke7NV+RaJCPVvthbD5hrYfsl9aW:1ooM+WirNmL3snw3GqRrLecT16cHsbZA","tlshash":"758609d4b295a06245d2b7d4983b1b42933a7d1c740b80ecfb9ec8db19ab5c9607bf34","size":7967640,"data":"","first_seen":"2026-02-13T16:20:47.493748Z","last_seen":"2026-02-14T00:18:04.970989Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"ai.cyraai.app/js/chunk-vendors.ea9aa0c4.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/js/app.7c90403d.js","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b8ec2ee63191a6e66ae4f423638e955","sha1":"8370e45b6e0a500e1ce28259de28c3c859936e58","sha256":"010db40134ee50c4d86f8c5ecdb01aca50e1e43f3eaf7f1f4065ff0519c95503","sha512":"155dd26c39a64b2ab1c9b643e29ed95bceb5247d695f9a40a84456c8d9b17f77c851a64f5196fa979da98d69b8724061c7fb6f095d97967d2cda2c9e009d6845","ssdeep":"49152:tPc1MEPMfdHMuyoulOM9ov9l6Ff1RsvgWjeNYl8yd:1","tlshash":"1d06e03715c669f90b968994e01b38098c321abfe145e0d7b9fcee5da2c5304933fa79","size":3710176,"data":"","first_seen":"2026-02-13T16:20:47.496897Z","last_seen":"2026-02-14T00:18:04.972003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ai.cyraai.app/css/chunk-vendors.6608f063.css","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /css/chunk-vendors.6608f063.css HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Fri, 13 Feb 2026 16:54:43 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:59 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QwbpTLMxBM8kYJgAdMgBwYxWX4tko2Rn\r\nserver: AmazonS3\r\netag: W/\"54fc4e1853ec79c41fb112fe3c9ce6f4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: p-KUVwMF8c9a_jb4Bw_9o_dgk05rCBo-622ifJpHFB9hT4zfhe2PxQ==\r\nage: 26571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":146346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"54fc4e1853ec79c41fb112fe3c9ce6f4","sha1":"f65ee8672fe4312f18e2799c2f68ec0636968624","sha256":"c6a8c31fb9150fc35ac760d0b127ba3443169f55be40cee43bf9169be7dbf57f","sha512":"c2f6bf0781f38684ac879dfc47feda6dcc93d0d3f8b1d1dfef20b08dc5e5e26b35d6c8b58ed8a5b9f729edb1d3263e1d7f1196429e830150859e206f32c57834","ssdeep":"1536:PTQbFNJ+jqkiHc4rx3WqyrtpqoSWEDZ8Cfq1xn1RVSJf:PWrxmNH9yDzfkZEJf","tlshash":"ede3e62796c0236cb31bcd209fc4a6d8e224d123e5121bf9f1517a2dcfcbb951296b5b","first_seen":"2023-12-20T05:25:30Z","last_seen":"2026-06-02T03:52:01.592313Z","times_seen":71,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/favicon.png?v=1.0.1","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:34.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /favicon.png?v=1.0.1 HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5014\r\ndate: Fri, 13 Feb 2026 16:20:14 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:57 GMT\r\netag: \"9d770689c6d33c31e3fbe5e7fdf06e48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5gR3byxRZCXJTANyJTo9OtfPTUt_P3y2\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: c-LGyj0UpzfD303yPECiYi5f_BVMjxS7XABqdZOD3tsALS_u3lSdNA==\r\nage: 28641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9d770689c6d33c31e3fbe5e7fdf06e48","sha1":"623e38c08a24cbe54b5a8d569edb2ea14a4feabc","sha256":"502534ed8df9fb46631827bb0aabe0faa11a97ae9588d4472835409e272e1c9b","sha512":"1945192d7a98204627cc26aa39afed554e402fe8755be668548239b1002bb1ea44a749106f07ace12331261b1d656c6acb494c4b37f0d0b0b3a0dc258195fcd5","ssdeep":"96:ufo1TnBQQgcAsX70Y2ThYphQWXlTEJYFtvudvph:Oo1TUc9/aaYJY7U7","tlshash":"0ca16dc18272fd5e80f03f32ab3f0585adac41449fbb97886513a47ae09a075068fe1e","first_seen":"2026-02-13T16:20:47.457933Z","last_seen":"2026-03-22T16:43:32.35458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/css/theme-dark_blue.28a26a79.css","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:35.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /css/theme-dark_blue.28a26a79.css HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Fri, 13 Feb 2026 16:54:44 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:06:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ut1rgufX9XXP8rsqh3kGVgTar4_agD9C\r\nserver: AmazonS3\r\netag: W/\"e36705a1dd2e77bb202364cba320dcf6\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: wa14PWP-x6MuBM6p3Yj3VV0N4bmOfJmG3zjVg-U5d5QmUH6G9QXFmw==\r\nage: 26572\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":187337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e36705a1dd2e77bb202364cba320dcf6","sha1":"8138ae09d213ca9ad2fdeb107730826773a7254f","sha256":"828182f72ae0a7be8bb0829138b1f22bac2e1538798fd9e3a8e5d1a35da27606","sha512":"ae98c9c167d94d9f44aa2edf8685b6efd3aa18cba1ba0ad230bca61b8191e0fcf57c31165fcb0bce437ff38be84f174a08247319389e5509209baf497e1d5642","ssdeep":"3072:YONtMTe5BUky8yty9SgPPP5P8P3PsGfaGP8P+PRPEPfGPf8PfPPfAPfaPfoPfBPV:YO6egky8yty9SgPPP5P8P3PscP8P+PR/","tlshash":"8e0475716f4a503df4ef9b6e77a0db891f68d043d2890e75f806f915cac218227b2786","first_seen":"2026-02-13T16:20:47.460541Z","last_seen":"2026-02-14T00:18:04.962595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/js/theme-dark_blue.b9980db0.js","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:35.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /js/theme-dark_blue.b9980db0.js HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 113\r\ndate: Fri, 13 Feb 2026 16:54:44 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:18 GMT\r\netag: \"8cc41c9e35631a36bf28179686460f7a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Zq7yg44x7UEoe6v97ysJMRZF5qVpBHAa\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 5bh5ZZTGlTtaRYt-z170HadhLTz031e7TMT7lge-2BdvrWofU5euPQ==\r\nage: 26572\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"8cc41c9e35631a36bf28179686460f7a","sha1":"05b8331fda0e9182bf342cd9b4a597c845e139eb","sha256":"63755310f1aa7eee4d3e4067c54a37fc671611ffedc2e83d0d485194063fa6b3","sha512":"20185146d6ed955c6026024011600f3fad375dc406e7278f0c765862fee0cef7e6456300df635937c5126653c2a75ec592f5739944fa35ed23e2ec02654c0f00","ssdeep":"","tlshash":"c5b0924620897d783dab0cd018ee1d6394ed5079349c44926ef00c5084a1ebc1651cdc","first_seen":"2026-02-13T16:20:47.485245Z","last_seen":"2026-02-14T00:18:04.963151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.cyraais.com/api/Newapi/getIconList","fqdn":"api.cyraais.com","domain":"cyraais.com","tld":"com"},"ip":{"addr":"104.21.85.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:35.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyraais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 09:31:21 GMT","end":"Mon, 20 Apr 2026 10:29:47 GMT"},"fingerprint":{"sha1":"B9:6D:7B:57:26:D6:D7:DF:71:CF:5D:A7:0A:A9:3F:D4:59:CA:65:5B","sha256":"1F:6E:AA:D1:A3:75:F4:3C:CC:EF:C8:4A:A4:89:86:BD:9D:FF:FE:68:7B:B9:6F:E5:10:B3:C0:E8:16:B7:DD:DD"}}},"request":{"raw":"OPTIONS /api/Newapi/getIconList HTTP/1.1\r\nHost: api.cyraais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,x-requested-with\r\nReferer: https://ai.cyraai.app/\r\nOrigin: https://ai.cyraai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 00:17:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://ai.cyraai.app\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: content-type,lang,x-requested-with\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lwobai%2B30oYpsP22unVxcMs3IVo%2BKr%2FC1DoA4tYxTkuzDKXRca%2F6gjMBgLawkTENC%2FuGGMev2ghxNP8cw64Rje%2BxUplBGpsuPdp7AqLFzg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd862258ac93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T07:34:17.141745Z","times_seen":16233331,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":34,"dns":10,"connect":1,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.cyraais.com/api/Newapi/getIconList","fqdn":"api.cyraais.com","domain":"cyraais.com","tld":"com"},"ip":{"addr":"104.21.85.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:35.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyraais.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 09:31:21 GMT","end":"Mon, 20 Apr 2026 10:29:47 GMT"},"fingerprint":{"sha1":"B9:6D:7B:57:26:D6:D7:DF:71:CF:5D:A7:0A:A9:3F:D4:59:CA:65:5B","sha256":"1F:6E:AA:D1:A3:75:F4:3C:CC:EF:C8:4A:A4:89:86:BD:9D:FF:FE:68:7B:B9:6F:E5:10:B3:C0:E8:16:B7:DD:DD"}}},"request":{"raw":"POST /api/Newapi/getIconList HTTP/1.1\r\nHost: api.cyraais.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 14\r\nOrigin: https://ai.cyraai.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"{\"token\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 00:17:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: https://ai.cyraai.app\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vp81gw8wuG%2BQVSCxGPZ9SRYBon4R4gqKIQxCLqmmGHM3NSVKoCfHFlv6U%2FBEPQJT739dNIf2A87Tq3ppvcjszxmakHaT6gGAhktPJjBETQ%3D%3D\"}]}\r\ncf-ray: 9cd862263cc33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1921,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb84d16941d046d5aca11691246d0e79","sha1":"094fe976a24dfa9850cabcb14383f7ec84f35fd5","sha256":"1244d4d78880c51e5c301bc38da412323371dd0bd38f8cc558366e7d7e3d521e","sha512":"85712e6fe16a4bb657aa32713e9e2585a08258e24c695fcdc32afa24b2a7807287de97a226fcfd098ac60653e9c8c2c195af814cd353f1d651630aed0078df24","ssdeep":"","tlshash":"f44148f6991aed3ad633ad916bd2b34ae604362ffccd4e400adecc50d0d62d1814863b","first_seen":"2026-02-14T00:18:04.965156Z","last_seen":"2026-02-14T00:18:04.965156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/img/title@1x-n-n-n-n.3820e60d.png","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:36.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /img/title@1x-n-n-n-n.3820e60d.png HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 13204\r\ndate: Sat, 14 Feb 2026 00:17:37 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:27 GMT\r\netag: \"e24e560b901e4c7b766770aaa1763123\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DoNsz0TYopyX8LSGegYSapyc7uvqtdOK\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: aUsnaWMep7GBdBfPO-KiAA9wrTUDIHXGnLQ6lfbX1Anks-uUn4KF-Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 370 x 289, 8-bit/color RGBA, non-interlaced","md5":"e24e560b901e4c7b766770aaa1763123","sha1":"53093a559dbafd79684dccff4fc78a951a2121d9","sha256":"4f0bc7622705efa9ffccc712f563d6fdf216d68188a2058b5dc82925b007e9d8","sha512":"934cbd3027840e272b0e5b652d441e50a96e19350ecc31d6ab8a2a9b3725bd21ffc54ea9df9faabf4a2ad74271f0b86ed08be11579f9e20b0daedb7ab7de5fc6","ssdeep":"384:k7Rx0W1YXbdThhhh3da+kNEIRi3m8Pzcrezu5BbJaSggI1e3E:k7otd7lvWGrcrT5VJaEX0","tlshash":"b852d0be1c450e7ecdccf9f09d4a2b38baba5838bd087262110dce6674d0a0389c5b30","first_seen":"2026-02-13T16:20:47.489627Z","last_seen":"2026-02-14T00:18:04.965936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyraai.app/","fqdn":"cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T00:17:32.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyraai.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 13:51:20 GMT","end":"Tue, 31 Mar 2026 14:48:50 GMT"},"fingerprint":{"sha1":"6E:FF:29:62:50:E0:75:EB:87:4A:37:B9:14:EF:BE:B4:E9:F5:50:71","sha256":"B0:E3:2C:E7:5A:77:D4:62:B8:D7:AC:2A:9B:82:53:5A:12:97:47:B2:BF:E3:1D:3B:E9:96:3E:09:B5:02:19:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Feb 2026 00:17:32 GMT\r\ncontent-length: 0\r\nlocation: https://ai.cyraai.app/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0NcyVgApn7ELZB%2Bjyg1Zsruj%2FphNlZ%2FpUCC%2BPwMEkdyKIz41lIyAEutJI1jm0c8JYbVeUxtLq%2FIrRGLIsxqqBXVGAJULahSF2fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cd862127ded1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T07:34:17.141745Z","times_seen":16233331,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":52,"dns":23,"connect":2,"send":0,"wait":5,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T00:17:32.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ndate: Sat, 14 Feb 2026 00:17:34 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:58 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Jif6n1ltnMiVezsYGPIaUv8TSxedSW1v\r\nserver: AmazonS3\r\netag: W/\"4b085084d77f4790923aa0accefe8714\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 6lybNpHzVzz5tpANHMFBx_Lb0L_S3DJGnJgWnoh5H5u6oGkGYH0qAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (898), with CRLF line terminators","md5":"4b085084d77f4790923aa0accefe8714","sha1":"ae6ab0e74da9c623313c1c5f3f57bd3b9a224c2a","sha256":"73eab49061a4da8a1408f5c4524783742a611472969aacebd33382c661ef7670","sha512":"108a7d9049da363e01412064301f28317820d77b9d778e4c7011fe7b04f6ad57c7de2d3c8015050682b0c3206394464217de7895b499183486466a37d8d06e6c","ssdeep":"","tlshash":"7e3103958c00e08e53329794ef70761dc1c7985fdb2258a0beed016e4ff0e884976eb4","first_seen":"2026-02-13T16:20:47.478376Z","last_seen":"2026-02-14T00:18:04.966621Z","times_seen":2,"resource_available":false,"data":null}},"time_used":993,"timings":{"blocked":425,"dns":113,"connect":1,"send":0,"wait":143,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/js/app.7c90403d.js","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /js/app.7c90403d.js HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 13 Feb 2026 16:54:43 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:20 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UQB8cldJlmOm4wagItAZf_XqkhPPiSRm\r\nserver: AmazonS3\r\netag: W/\"6b8ec2ee63191a6e66ae4f423638e955\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: dEgFk4CBRnSWOtsA3UmUDPV_IoIpjCGB2TuAD9G-QR2gvLJdqlLrpw==\r\nage: 26571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3710176,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95d87f584a0b236343f617da53ec24f3","sha1":"83f51d659867e3bd01853891dcb3d089cbeb5f97","sha256":"1fa7dbc4d7a7a44ba155579496f9308d5a3fe24531806a99062392290502549b","sha512":"875084efab2006f01ea77a14d3c276f9e03edc45130632cdbd75b27922ceb9f006bdd864f473b48ed1b97a6a058620dbb9760e0da37fa49533de76cf67434680","ssdeep":"12288:Y4RXRzhvMORNc1JusSJ02nEfJVMQTDTNp6iwMmALNRaPvPZ1Sz2rL8eOLwBqqeGA:YkFJrPc1p2nEhVMGXUWNc3R1TeGA","tlshash":"eb35e13a15c99ef84ba285c4e047180c8c361f6fe046a067f9fdfa6d83c5a05d27e679","first_seen":"2026-02-13T16:20:47.475884Z","last_seen":"2026-02-14T00:18:04.967193Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/css/app.7caca4e7.css","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:33.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /css/app.7caca4e7.css HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Fri, 13 Feb 2026 16:54:43 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:06:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: H04CQ65VozyBW_7f9QJw86STdnjB.R.S\r\nserver: AmazonS3\r\netag: W/\"4651b5a4a97a552786cae88da96172f7\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: wwt6kxHFdLLKIGjtmz3g9hSSnvuhcptMZmxCdWBIAtRl91eH1TjnOQ==\r\nage: 26571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":177542,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4651b5a4a97a552786cae88da96172f7","sha1":"72b541c52789e16485f82359c3396ca01a008cbc","sha256":"fd170fab837fd95a33db00bd42e34ecc17c19a2a2e7a0a18f3eb7c3c7f87f2d4","sha512":"1b706d3016eaf75285c754e88d4f07f72aea7cc4899c32738e48c099cf960e3ce619fc3f364cbe8ede1d87867d784b087a4e9dd722b5045bc8046d8d5e4566d8","ssdeep":"3072:m31MN7hCtCBHky8yty9S+PRP8P3PsGfaGP8P+PRPEPfGPf8PfPPfAPfaPfoPfBPD:m31Myt6ky8yty9S+PRP8P3PscP8P+PRR","tlshash":"600496725f56543df4ee966e77a0e6cd1e68c043d3890e78f406f925cac22c227b26c6","first_seen":"2026-02-13T16:20:47.451992Z","last_seen":"2026-02-14T00:18:04.967699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/js/chunk-vendors.ea9aa0c4.js","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:33.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /js/chunk-vendors.ea9aa0c4.js HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 13 Feb 2026 16:54:43 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:17 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4iBPBops87VfR.jUJm5r8DYW2gdmHWm3\r\nserver: AmazonS3\r\netag: W/\"4478cf551725172e645295ae51f1fbf4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: RZ4zksRfyCCrlohysu1XRbU7zsR2BuQ450ly0iG2NgAa3K7j8NEheA==\r\nage: 26571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7967640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65175), with no line terminators","md5":"a7d0296f1f85b319475329aea09ac4c8","sha1":"043e20cd25d924beb5ab6367fdafa726083dce80","sha256":"ed5f4a247cd72b8ab1c8e33e7611c6a9527ab181272d3da0ac448e4e54cc700b","sha512":"14a8524fcba0f2b5a2e01c797a2cc654e08b6b6253546055070f5492acc213f2f955d5fcc697abaa9078d69d63afc25d195fe26739c1e2b666eda016695b7370","ssdeep":"12288:vR1fG4f1AUQwkpyjiYfXP9pM/+n7l6eOYi3SHPmWxQ09gGrD:ffFyUpkpybfXPoQ7l6T3SvmWxQR4","tlshash":"6625099cb655b02553a331e4406f150f9236281cb40f85a8fba9d8da6cbd58f623bf7c","first_seen":"2026-02-13T16:20:47.480754Z","last_seen":"2026-02-14T00:18:04.968305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/favicon.png?v=1.0.1","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:34.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /favicon.png?v=1.0.1 HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5014\r\ndate: Fri, 13 Feb 2026 16:20:14 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:57 GMT\r\netag: \"9d770689c6d33c31e3fbe5e7fdf06e48\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5gR3byxRZCXJTANyJTo9OtfPTUt_P3y2\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: w2Pr7n05OVSGAQ0sL0aQiAKTEQSnrEBUXKvKjmwUecJR9xA5NjJAxg==\r\nage: 28641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9d770689c6d33c31e3fbe5e7fdf06e48","sha1":"623e38c08a24cbe54b5a8d569edb2ea14a4feabc","sha256":"502534ed8df9fb46631827bb0aabe0faa11a97ae9588d4472835409e272e1c9b","sha512":"1945192d7a98204627cc26aa39afed554e402fe8755be668548239b1002bb1ea44a749106f07ace12331261b1d656c6acb494c4b37f0d0b0b3a0dc258195fcd5","ssdeep":"96:ufo1TnBQQgcAsX70Y2ThYphQWXlTEJYFtvudvph:Oo1TUc9/aaYJY7U7","tlshash":"0ca16dc18272fd5e80f03f32ab3f0585adac41449fbb97886513a47ae09a075068fe1e","first_seen":"2026-02-13T16:20:47.457933Z","last_seen":"2026-03-22T16:43:32.35458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/img/bg.040108d2.png","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:36.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /img/bg.040108d2.png HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/css/theme-dark_blue.28a26a79.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 330918\r\ndate: Sat, 14 Feb 2026 00:17:37 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:05:11 GMT\r\netag: \"4507f70c4c975a07e37b2e24494339d5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RR0m2XL9AG3dFW.PSjKL_1UrTL28kfmB\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: MVSsiz0ATN3iEsLiYtgmjlplSIkQ0aD9B1_xG-WmL_Yz0Zsq7msK3w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":330918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 2436, 8-bit/color RGBA, non-interlaced","md5":"4507f70c4c975a07e37b2e24494339d5","sha1":"113b7e53d22a0a2c14f65d201db77bbd03f5014e","sha256":"8f305ae650519cdc560c851fb7c7875f8eaa9a56cbcc63b91c9a3ca52b3ac5cd","sha512":"578fa0938c58eeecfa36c8739e8357d4f719478c4df056a689f6b7e675cd772fa3c9c0c6bf47e8d0da0aacdfddf1f1568688afd3d6acb267e68bde8107a45af4","ssdeep":"6144:nT/Yf/lPys0tZZxUpKEKaOr3HZUOTQkP2pIy4zUUuAIDdP+HoMxd0FH:nT/YHQndxuO7H2OTQukszU8Sd6SH","tlshash":"196412b3a92d1507cc34123061071b425ae1bcef91bdbd4265da3536b70fafcb9a34a6","first_seen":"2026-02-13T16:20:47.472421Z","last_seen":"2026-02-14T00:18:04.968789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai.cyraai.app/img/customer_service_icon.d4d6233c.png","fqdn":"ai.cyraai.app","domain":"cyraai.app","tld":"app"},"ip":{"addr":"3.167.2.62","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai.cyraai.app/","date":"2026-02-14T00:17:36.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai.cyraai.app","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Fri, 19 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"95:36:1A:7E:F8:6F:EF:07:53:0B:69:B3:E8:F4:7F:D0:9D:54:E8:AB","sha256":"2B:A9:31:33:96:15:79:F6:96:14:B9:9D:3C:DD:ED:AA:6C:ED:47:83:D8:66:AA:6B:A3:CB:83:09:64:3C:68:C4"}}},"request":{"raw":"GET /img/customer_service_icon.d4d6233c.png HTTP/1.1\r\nHost: ai.cyraai.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ai.cyraai.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 53397\r\ndate: Sat, 14 Feb 2026 00:17:37 GMT\r\nlast-modified: Thu, 29 Jan 2026 15:06:11 GMT\r\netag: \"d78be671d3068c905a62e7d0f0223939\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: O_ESOcY9cR6PXNFGdEeOvPJVWHnHSwXm\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fTpLNmjKWsMoIBX0pZY-113lnxyZNjeTh6g1uEWr32texg4f_3lusw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":53397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d78be671d3068c905a62e7d0f0223939","sha1":"1898ed580c1339550c56983a84574fdd749a1c14","sha256":"e61f8dc282faac75a0b07310add941b8b42c05caec0ed2a7cf39191ab617d455","sha512":"442a6002ca21b959ac4b049e1a35c2bf8c2718f88bac459f7a333c749f643aa06c67b0fa2a26e118c72cbc1009f75b21b5fe8afe02ac784c2316485405b83f9d","ssdeep":"1536:zC+PNkLFkxkC8DGZgiVHduTzSYGw6Ubv+T:e+PAFenaZs0v5GwFGT","tlshash":"2d3302d54f8f7253ad40f806a608ae13b3418c3d5da2eff0a55ef88e19b9a421d0d54f","first_seen":"2026-02-13T16:20:47.454504Z","last_seen":"2026-02-14T00:18:04.969505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ai.cyraai.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}