{"report_id":"bc9d0bd8-4152-4011-a61c-c63f62561d05","version":6,"status":"done","tags":["suspicious","phishing","mamba","aitm"],"date":"2025-08-18T21:09:20Z","url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.201.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"title":"Cosmic Exploration Hub - Arctic Skies Observatory"},"submit":{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"172.67.201.197","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-22T21:09:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]},"summary":[{"fqdn":"app-aawe.eu.com","ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-18","domain_rank":0,"first_seen":"2025-08-18T21:09:21.012271Z","last_seen":"2025-08-18T21:09:21.012271Z","alert_count":16,"request_count":14,"received_data":3102124,"sent_data":9116,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d08bb5fc22b2baf3f06088ecf723391b","sha1":"2db84f3f9c6baef7865e190174fcad05f8e73c07","sha256":"74625831136e57e198c7763bb81f656f3e3aa6685c3cc693fe064582f2d108f9","sha512":"ef163a487869c9d7fddf58a8d877a2650989bb727caca371a49fc456420a4bc6edd31148cc13043370dae7620e3cd4546a0557ad1ffa573883b5cc83121dac00","ssdeep":"","tlshash":"cd90028661156220405610e4584e81440212210027908628511d06d85715c6622638b5","size":44,"data":"","first_seen":"2024-12-02T18:53:13.736335Z","last_seen":"2026-08-10T14:31:36.273234Z","times_seen":41176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1878cc1b9617523b3e1ceed41dd9e2ba","sha1":"9f9c7b5ee7719b9b1e7a353d011ea000c05f8a5b","sha256":"59878523262c3ff3fc8e071b0ec34fb395b8a728ebfabc2488e2e6cb4042dcca","sha512":"a229bedea6ab746be227e9f6ab908c6b958196932105e5cd37c77b6a89e4b3f8d0240b3b145c42be11a0b29fa5a06e6bd28d7beee6f02899b146ebb5a01d7174","ssdeep":"","tlshash":"e1413375b0b6b43816b30017313f9645b3b753647ca9f4c1818ed999b9bcc4a0b2ebe8","size":1931,"data":"","first_seen":"2025-05-07T20:25:43.584111Z","last_seen":"2026-04-29T16:33:03.647908Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28aac8dacb616d0ff7f14a07e2e8ff92","sha1":"54a355de79c5c14adb4227971e853f4101d3d751","sha256":"8028c7123815fc705096b46bd3a38488935358ca4d457b13835f02b09ae2842c","sha512":"2185df4f2296ef044b263738ff88fcebdd98b7ea446959519cc95be5c47c198d7400ca594c4321f0514bffc8748cf77292a999312e5c479cce31023975a0c886","ssdeep":"","tlshash":"cf810f1f20f621384173b1baabdf4250723121473006cb593f2c97550f82a666eb2edb","size":3936,"data":"","first_seen":"2025-08-18T20:51:10.334848Z","last_seen":"2025-08-19T18:46:10.619013Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-aawe.eu.com/static/earth.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/earth.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"282d4-6880efcc-160321;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:21:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 164564\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jKrdq957NzW6iFl8jyBA%2Fqx2XgKu1czqi7q0H%2FkGKanDEqUAHgLNhPlOxokNW528Jv9CMUdtgRty24ADMczBVaNR8ytKAsqMa3HY5v30Q%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c05c1a3ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":164564,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0641cd4c5a22451f1d7de311ed7ba3d1","sha1":"9981bcae7c2f9f33500168e1fc11f1b2a1d7f148","sha256":"b80aa444307ca76283fa22e63873a6d948ec3bc1f58ce348e63560c2d98bd1f5","sha512":"2c6962753287f92928e0242ff969171cc1de3b533632f980f68777626ac72e222bc71b35cfbd808bfc5be357a6a4a45622773e4a2884c9faa4ff2d3f71256420","ssdeep":"3072:7CdtnYhmNGdU9FlG7N1r1mSkOaIjS+4eghb1BYYjgJYHGO:2dtYw4dgPG7N1rcSkPb1r8SHGO","tlshash":"44f312b8e09c0d7c7bcb985462bde751ee90a7aa57f4f0d839cccad7486298438068d1","first_seen":"2025-08-18T20:51:10.32731Z","last_seen":"2025-08-18T21:09:24.014734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/jupiter.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/jupiter.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"9b9f6-6880eff8-160327;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:21:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 637430\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1BcHe17S9eNvYzFKm81Vf1cIypeU0BLmdUi0SNNlQLnaI%2BZuy%2FdGL0dPMM%2FkQGpfsq7TKJXxI4eY8g0Zsmn7NyYcrAsc10F0lCLODxMWPA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c06c203ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637430,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"4ea4d0d8aaaef4b5ce0dbbd4f5caee3b","sha1":"f5864faf6f3834938a8da1fef6c1fc412d9637ae","sha256":"df9aa45886a9173816d527ebfcc7cda3189bde0500e0e309735a5b5a98c478a3","sha512":"1b42ed684434bd4b3d6ff3eb9ac8cc89c0f2fdcbe28cb51309911dceba72741448fb478a6887073a11ca3e33b7336ea778b31bddd7ab4b54fc58d265a47d560e","ssdeep":"12288:59VKjxooWdtD+gy8mlf3gQdLDjbuDueAF3pDEc9ef7dXoBT+UbyMGdUTBn6VA:rVceD+Fr39TuSFpQBoXmUVn6VA","tlshash":"7fd423f5c01ad1ec13180fa8dbc6328dfd964d74c89159c3368717b6b607bd8a43aa99","first_seen":"2025-08-18T20:51:10.33098Z","last_seen":"2025-08-18T21:09:24.016002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/favicon.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:09:00.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/favicon.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"8bfc-6880f05c-160324;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:23:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 35836\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:09:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApFEqv3du0szmhKB5Z0FC4sWTdjckOvuAweeCTNll6IKQA6%2BrEfuHwNmR%2BA0C0WUuC6JGmGGuU1Mj13N6oqv17Ziibn5bq5%2BtxTeIclXdQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c59d5d3ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"dcf31be927db65ddca5eb25fa14be68b","sha1":"920fd15dd585558a967301894ac3659ee2d3060f","sha256":"de5c729d4292d296a14ca9bdd02efb6251132ec0e65dfffe84767b3c6d7de152","sha512":"34a9942cea10de14997d7321ad7e004393975cf81a831cc57fba62b9b19c68abfc94acc6f7792fb68f91a44a8aacc5528bbb19f1c9df0ef375893810f6251682","ssdeep":"768:HKoQps9ZcvEB/6jkAAdtk1oxH7pXo6iiT0saYL+AEt2wjzF:HZQCZs6Z7kKt79o6iiTvD+AEVjzF","tlshash":"bff2f1e043b14b26c94ce5b54aecc0ddc76f7268393add912a9d138ab1c9ef542e311d","first_seen":"2025-08-18T20:51:10.332751Z","last_seen":"2025-08-18T21:09:24.016893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T21:08:59.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"POST /?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 112013\r\nOrigin: https://app-aawe.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: no-store\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nnGRscucgWiy32hjzC5996aalIelxplLAfQ0qqjBzmg52T67DJnz3Qylb%2BqDf8%2FKjX%2FEewSlF7Oof0V5cAM64Y%2BCub74EbiDkDZrSVhMGZrdEonGKZkJAP2aubXXWSkk8aQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 971463bdbab26dac-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=14883\u0026min_rtt=7442\u0026rtt_var=12312\u0026sent=36\u0026recv=107\u0026lost=0\u0026retrans=0\u0026sent_bytes=7825\u0026recv_bytes=114206\u0026delivery_rate=752598\u0026cwnd=258\u0026unsent_bytes=0\u0026cid=4dbba24f5210d518\u0026ts=1130\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60899,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1697), with CRLF line terminators","md5":"7eea967b20603d5652ed43c7dce0368f","sha1":"d43616220a2f3428faa8d3d3cde3be2ee8388a65","sha256":"ee762d82b94b1871a834a0c7d14139a4a64cbf45661fa4971cc80b1e40ec3fbd","sha512":"24c9c46bddf79557529e445d8f2928ba9179d6804520b96753f111939a6e28d2901872a7f54275666dea15db1537df8df7f45fad484cb3947089a4e904da3ebe","ssdeep":"768:32VhqKHc5GNQxWF5qhVfvQkOpJwNhyMplGzCH:GVyUPKhVfviKZ","tlshash":"b853c43266c11226047383a65fa3479afbb9d057d24282583aed13da1ff3c50ca77f99","first_seen":"2025-08-18T20:51:10.330148Z","last_seen":"2025-08-19T18:46:10.617014Z","times_seen":3,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":9,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/mars.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/mars.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"22ba0-6880f034-160328;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:22:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 142240\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zo97mR5duopv18zbi0ubeSs655x%2BFCd0lfagrnQ8KzQafNms0vTmFyoF5Eq5U%2F2euZUh50c%2FLk6yWFug%2F6ev84D9Ef3ffV8oj6ejU517rA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c05c1b3ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142240,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"aa8d1306666ff99dabfbc29f2d45bf4b","sha1":"a01146e35762bc73239710879fb8213eccabfc54","sha256":"9f955644457e0fafdb310b1cf35600f7b6e07d0405ae352314443bc8d1533e92","sha512":"370dd0e6421174ee93309d04b81bcad537795dff5aee26fee00f1cbf90d1246321e4b2548c8e1706c1a987e6c185737d3c7e5372d52055fdbd39e493b2e72209","ssdeep":"3072:ewxQI4cKtuNH+VKV0SODbGYk28nG5e6KVvV8mgPkdqn/1b/DOCws:f14cKtlVK6SoyYeF14kdiO1s","tlshash":"cad3120502764ed15c6702b590dd01f6865c63f909f8da2cf8af946b3ee3fdb9c18289","first_seen":"2025-08-18T20:51:10.321842Z","last_seen":"2025-08-18T21:09:24.018415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/mercury.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/mercury.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"22ae6-6880ef98-16032a;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:20:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 142054\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bp6ppmHnxgh4XbD0En0AR4hKDYkAB69QI%2B5Sih8p4DGsUnpyj%2BTJ2tdNmzciNockYAbbbo39igOQanOz6JI12zi6ImarJMSq37hQxeBWIQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c05c173ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":142054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"fd0b6ff8aa2e6799fdf72345c1f45315","sha1":"bc9c1fb757bb10d2de9832fd4da4030f759d0784","sha256":"ddcba3d98cae8bbae12ce9d66f996ee8519573a729d8314c877345f84f16888b","sha512":"c2bf023c674fc7f77e4d70c7faac6ad50307365aa1b4786472bd911fcfa707c1e3888e1e7035fb7f85e364ddadffa30e08de75f56daa3809fe4802a8c7330997","ssdeep":"3072:edkNH3P72U8d1VFwQjy39dwRnh4hpUlCX7ToJB67qvxV4xai+euWVLPnsHa:UkNH/7gnwiu9dWBlIToJB67qvxV4YeuS","tlshash":"f2d313eebb81079db49ad2813132db8cedbd81e8598b1e89e7a9f8d42b2d7150533411","first_seen":"2025-08-18T20:51:10.32523Z","last_seen":"2025-08-18T21:09:24.019046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/venus.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/venus.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"17a46-6880efc0-160330;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:20:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 96838\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1poHYMObP2GbYkRjMqLrS%2FQJowy6S53FXcXpRwhKBpZNEYb%2FGk8LcvOejahFZ7rtDLXfndALOCvIkgtwNzRNrHar9KGN3UHPEu5VKUmuw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c05c193ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96838,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"12b61aba877ed0736cb1e10ec1e0333e","sha1":"1fa32f6efe6bacfd7df8e251d53a37a88d63f07c","sha256":"efeefa7843b7ee6b06410f7405a010cb4fed2704de7d39c829227d627e85e79e","sha512":"720ab520061488a09445cbf953f3f5a83e184bdc3a2424ce68388f1748c8c1933b2f822352a9da4fea8ca34363553cea3d401e2d46177ca97b74391fe41eb406","ssdeep":"1536:ukv+tyOHKWfYYdzUjY698M7h6SdwG2tW2vElCql637MdWIw8k3lzHV/T7waU3n:ZY1HK1szUjjzh6SdwX5vETl6c+Vz5w93","tlshash":"ec9312b9f93eee053382f3381624733d503f204156058d695d9adad8aad828bdc3ed57","first_seen":"2025-08-18T20:51:10.326125Z","last_seen":"2025-08-18T21:09:24.019954Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/uranus.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/uranus.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"17c25-6880efe0-16032f;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:21:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 97317\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4br%2ByczNchzB%2FJcaGKMPAiIvjOcdI%2FY5Y3lDYvojseZD0mDb%2BYYhvxHyHGQQNy%2FbXW3ri7rh483CIg1JjEbWzMsgS4Ogt5qFuuQUwqHyQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c08c333ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"ea6e7dd5248c38a37be0f4af7682a492","sha1":"509b77416081fee0c50d467bf53da92cf8352059","sha256":"81166d95ba1c2a698a2927d2c5dcf16c8ff7c78e9f2ad844db29aae7a1d06b14","sha512":"6a1e2cea1480454cd9909a2d4fc48cd7968df1a9fc36437fa7cdd2ca95c2315ce0ad03402244f70e9882da49ee0f6b80ad1a6a19e1897a78c462d7da00a65ca0","ssdeep":"1536:lBSdjOYcjMFuNivyW868IbFQ5R+zKTdPL00VaJNh1RQP+4XECzE:nSds4E+x/O+MdPL1SQPOC4","tlshash":"289302836c24f129e3d5fc6da6b6b43a02c3be468b722e08225165d88754f67cc0c7b7","first_seen":"2025-08-18T20:51:10.328794Z","last_seen":"2025-08-18T21:09:24.020567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T21:08:58.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 21:08:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: no-store\r\nset-cookie: _cid=131c90167e79ed02bdf44845a42ca0b0; expires=Mon, 18 Aug 2025 21:09:58 GMT; Max-Age=60\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eQXkpkOHFFRpiaKo8d95pJv%2BR78CQ50wgcneGU8exyIk4LMNqPZva4BFvx%2Bx91ipeIepD9SonG2yfL%2BNuOu%2BvY4dwT9rrHCOmuaTFbQUjbJDtm4T43NFcUXdQ6c6OhqDYdY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 971463b8e9e56dac-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=13242\u0026min_rtt=7516\u0026rtt_var=12310\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3211\u0026recv_bytes=1233\u0026delivery_rate=572558\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=4dbba24f5210d518\u0026ts=249\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2675)","md5":"07a031f7bbfd85cbfd1e26aee11cab4d","sha1":"f6ff1f8f0014316eecef296301e9ff4d72cae7ba","sha256":"da2fa8c9b8d324d1ac9794956619f02985ab1dd01feac70d2fb329d7f3c17aef","sha512":"0e27960d79720e352f9f5a0df04a679c0f36956df12013982e03f9aef70acd84175d952b6deb5c4423c1207300be8f63cf48b8b583fe365a21282e9360ec45ca","ssdeep":"","tlshash":"a95109c3fa962f95d1245b03b7c8659b02342dca34536c08e7d210ed1e65fa68ad70dc","first_seen":"2025-05-07T20:25:43.468773Z","last_seen":"2026-04-29T16:33:03.623836Z","times_seen":1247,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":92,"dns":62,"connect":8,"send":0,"wait":234,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/favicon.ico","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:58.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqScamjKFMqQ8FwNbsGxxrHNS7wZFJydDhxgmjJIZd%2BBMhMZgSiCu5bYv4ENlkjIwzOQr5qrsNURI5Rj8VhXkPNEu5KnphAxkD78q%2Fulgw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 971463bc28076dac-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-10T22:51:56.125039Z","times_seen":43367,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/hero.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/hero.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"11a7c-689cbaef-160326;;;\"\r\nlast-modified: Wed, 13 Aug 2025 16:18:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 72316\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8p9Y9K9UpH3upfCNr57qY6chvxTVmigGvEBCjqkW54nFzM4tuyovWbYYH%2Bgg3vaazfkZmg2LQKI7oyLspqBUZXYENi00MFjAKBRaATimRg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c05c153ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":72316,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1177x714, components 3","md5":"830c9567fbeecdf67b10a50edb5338e6","sha1":"008a7816152d30dbc85732aa94032cae7d0bd072","sha256":"fa7ec3b07e2143af02f20db063e1250eb87b992df28eaa628d22c80e4331c7b9","sha512":"2f172e9aa3ddfacc2436726d4e8e93cb6fe99280a9723988d0158a09e228de77a0979717bf1350bcc9c724293c3126e62fbf52f0f2453c8544688af61b0693ef","ssdeep":"1536:9OuLlT8bni+gFkwnfKBFvgr64iA7T71jfksyAcG2Wo:9OuN8r2kwnfNrFt3o","tlshash":"f963021262d2ad18fd17c77b4f2a65b4518bed75c605a5afec0e582788ec275acc80c4","first_seen":"2025-08-18T20:51:10.324169Z","last_seen":"2025-08-19T18:46:10.613934Z","times_seen":3,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/files/img/logo.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:58.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /files/img/logo.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 18 Aug 2025 21:08:58 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oArUsS3whsoODh9WBdcaGVYx7dVBVOmWItMcExw1u%2BnAuzVwUAY%2Fk1Pt7g9Wk19ydA0V3ExWi1xkxW7aVds8xXv7zddtaxa%2B%2FIzd47S4yA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 971463bb8ed06dac-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-10T22:51:56.125039Z","times_seen":43367,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/saturn.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/saturn.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"a252c-6880f024-16032c;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:22:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 664876\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IDqYlV041cVWEWBxYg7XA%2FMODL%2FOV7w1moKKSDPruah2JGdIXdSkQFDX4WyT62sv7qz0pvDQaf8qa9zrF9LK69CTCwQ6iGttfgf%2FNzc2mQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c06c283ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":664876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1306 x 980, 8-bit/color RGBA, non-interlaced","md5":"0b230bac6808ad8c462c55c37db3cdf9","sha1":"0fce7f83d08c6e311c8040b6cb8a4ed2d70270e3","sha256":"3b66379644925eb9b7a6d4f99ab61ffbf6ae667d0d5dfc9b17e46e20763ecf41","sha512":"ebbb14f26e23f17fa016411ab36a09341d02bf49cd6ecf3f42788170384baad059020af369822e4eafd0bbe4f1b35dec8951ecf757a207fb5411d0ad0028169e","ssdeep":"12288:C78ZR+aw/JStGCRpuGKzPzWoibgpDGcJS9y7wI77Qg2IGNpVH8nw:CGMBSDubPWz2GcJ3/QRIK","tlshash":"7de4239d587485190d81a85dead378bf7b1bb28f0dbc0978cd49ec1551b0fe86cf28a2","first_seen":"2025-08-18T20:51:10.331936Z","last_seen":"2025-08-18T21:09:24.022993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-aawe.eu.com/static/neptune.png","fqdn":"app-aawe.eu.com","domain":"app-aawe.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.74.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB","date":"2025-08-18T21:08:59.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-aawe.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:38:40 GMT","end":"Sun, 16 Nov 2025 18:36:02 GMT"},"fingerprint":{"sha1":"22:E4:4E:33:C3:89:9F:7E:40:CC:D9:F9:C8:E5:51:E2:46:88:AE:9D","sha256":"0F:35:90:08:5A:9C:E1:F7:63:96:99:1D:38:9C:29:EB:DC:F5:1E:EE:3B:51:BD:90:51:71:56:66:4E:DC:69:42"}}},"request":{"raw":"GET /static/neptune.png HTTP/1.1\r\nHost: app-aawe.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-aawe.eu.com/?gad_source=1\u0026gad_campaignid=22901311342\u0026gclid=Cj0KCQjwnovFBhDnARIsAO4V7mAU7Ph3W8VBpB_Bx_YNhvqdF7Xzr9b7YbBNkM0X8Q7iWSs5nJzGl-kaAtVTEALw_wcB\r\nCookie: _cid=131c90167e79ed02bdf44845a42ca0b0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 25 Aug 2025 18:58:46 GMT\r\netag: \"ed391-6880f00e-16032b;;;\"\r\nlast-modified: Wed, 23 Jul 2025 14:22:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 971665\r\naccept-ranges: bytes\r\ndate: Mon, 18 Aug 2025 21:08:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 7813\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDcK8k6gn5eUK1mR95DvKmr7JlRMdA8sCH57Bjx1UPCxK7gi2exhrLD%2BSupB5ifN2XTX41EAuhluqTgT9m1noxYYzn1LQtN299HiQDUKYw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 971463c08c363ccd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":971665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 980 x 980, 8-bit/color RGBA, non-interlaced","md5":"5d71013bfea50640ca578517f0da0c77","sha1":"4e5b82235d31fd020cd5a4e57a463584a8d2609e","sha256":"ddfac7faa527a06ea5197ff784c17bf35fe47533b50354ec4f76390105b96f9a","sha512":"109654ded848da3487f1dbd9c44133bbf5a7331f45ef7f106f067e2a5de628f8a3f1f5d517d59f4764968f3ea9cdcce979d9c1a034705b7beb6d545e835a610e","ssdeep":"24576:B869E8s2+r/4yGNgJ3AO+QYeqk7of1OrvDPZ:pC8s2HNghTxjqk7oYR","tlshash":"d425334ead523a50215a773ae9e684eb09e5db0db0117db79d833b6cc401bfcb1b1c89","first_seen":"2025-08-18T20:51:10.323042Z","last_seen":"2025-08-18T21:09:24.023589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}}]}