{"report_id":"f992cdc3-5ea1-42b6-8f98-f88418ca6498","version":6,"status":"done","tags":["suspicious","phishing","mamba","aitm"],"date":"2025-08-12T16:25:08Z","url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"title":"1inch Chemistry - Advanced Chemical Solutions"},"submit":{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-16T16:25:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]},"summary":[{"fqdn":"app-1lnch.eu.com","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-11","domain_rank":0,"first_seen":"2025-08-12T16:25:08.523515Z","last_seen":"2025-08-12T16:25:08.523515Z","alert_count":23,"request_count":21,"received_data":1478367,"sent_data":16332,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":4,"received_data":197460,"sent_data":2224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"d08bb5fc22b2baf3f06088ecf723391b","sha1":"2db84f3f9c6baef7865e190174fcad05f8e73c07","sha256":"74625831136e57e198c7763bb81f656f3e3aa6685c3cc693fe064582f2d108f9","sha512":"ef163a487869c9d7fddf58a8d877a2650989bb727caca371a49fc456420a4bc6edd31148cc13043370dae7620e3cd4546a0557ad1ffa573883b5cc83121dac00","ssdeep":"","tlshash":"cd90028661156220405610e4584e81440212210027908628511d06d85715c6622638b5","size":44,"data":"","first_seen":"2024-12-02T18:53:13.736335Z","last_seen":"2026-08-10T14:31:36.273234Z","times_seen":41176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T12:53:44.188217Z","times_seen":418047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88cb53e3a5cba6c70383e2323d6c5056","sha1":"5215f259904fc0a2a6922038d2b46f85eb4a0ae8","sha256":"8954ed74c15f919f204c87182c43d9a08788838e5222be46240badebaaf337a6","sha512":"cb80535ae2f5a2bea080fcde69b0e3fe7b5115c1bfae4507b6b77f489ecf355a5a0629ae6a7ee21c1b5a18370d579507ba421fe801322f26578c6b73507c5876","ssdeep":"192:phpnM7DGvS3S9DJ80O4VRb2qAxG05WCMC7lpLZ5KyCuyK5CG:phdReSTbUqKlr","tlshash":"9332101e31fb10684aa761bfabdb575c313141073045da193ead83540f91f65aea3bcb","size":11328,"data":"","first_seen":"2025-08-12T16:25:11.636694Z","last_seen":"2025-08-12T21:28:51.131601Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1878cc1b9617523b3e1ceed41dd9e2ba","sha1":"9f9c7b5ee7719b9b1e7a353d011ea000c05f8a5b","sha256":"59878523262c3ff3fc8e071b0ec34fb395b8a728ebfabc2488e2e6cb4042dcca","sha512":"a229bedea6ab746be227e9f6ab908c6b958196932105e5cd37c77b6a89e4b3f8d0240b3b145c42be11a0b29fa5a06e6bd28d7beee6f02899b146ebb5a01d7174","ssdeep":"","tlshash":"e1413375b0b6b43816b30017313f9645b3b753647ca9f4c1818ed999b9bcc4a0b2ebe8","size":1931,"data":"","first_seen":"2025-05-07T20:25:43.584111Z","last_seen":"2026-04-29T16:33:03.647908Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-emma.jpeg?prompt=Professional%20headshot%20of%20a%20young%20female%20chemical%20engineer%2C%20modern%20laboratory%20attire%2C%20bright%20smile%2C%20technical%20background","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-emma.jpeg?prompt=Professional%20headshot%20of%20a%20young%20female%20chemical%20engineer%2C%20modern%20laboratory%20attire%2C%20bright%20smile%2C%20technical%20background HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"11bdc-68941d7a-120864;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72668\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGHeCG5z6%2FTDWJ8hXX320koKs9q%2Fldz9N610buBTWPG%2BrU7Ujg71lrU0pjALF%2Fb33cAZGnhNAqC8bNPZZ8uHWop0MGl5nO8kcHyv6adK\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153298acf0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"89360979bf389f099c66088d44cc36b4","sha1":"0ce9c09389fdb912de393e00123fef4db5454ce5","sha256":"3c34a6d99ba6f96c69abf95adf9f943b677e504aa9458018aee9da632e26ddfc","sha512":"b51b1aa8ccbc2bc4526ce1a920aeaef83f18e56eb89a6f2c0bd904403b1cf2c47ce527b486023173a3d3491bccaf6e98298968fe3872dd2e00365156e6a6e541","ssdeep":"1536:3YhCITtodFHxET9uq8k2zrt34rCBhX0enQfnQ6NkCR5Wvq6Spygxe:ohCImdFREBuq8PX5IC/0enQfQ6loq6Sk","tlshash":"7c6302abd97017d049014ba0f8cd655a44ed3306ffe4ee30db9f88da3b678e32499849","first_seen":"2025-08-12T16:25:11.608513Z","last_seen":"2025-08-12T21:28:51.114747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/files/img/logo.png","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:45.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /files/img/logo.png HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 12 Aug 2025 16:24:45 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcLfESOn5tDEg%2BeZuPWkQ735W%2F63LKL5GKpnU5pZr7gnhIiCnQZp1BkOJ8s8qAT%2Fp9tM780DrU888Kc6Mb0ktAlWhRGIWbfbzbjhDLba\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 96e153243b2556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-11T10:41:22.889824Z","times_seen":43374,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-12T16:24:45.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"POST /?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 112017\r\nOrigin: https://app-1lnch.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JKVhMKit5UZQ1JYfen3FWl2wnteFMXXAMytPOQYYMsVImY9Gtnsbmm2CCrHfOiilPbW4bF9kQ5xJ0lGGtJearT7xuYxdrYov%2FjyVl5JCVhLv4R0%2Br%2Frh1Ams08aT50hIXRNs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: no-store\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96e153264a850b4d-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1524\u0026min_rtt=546\u0026rtt_var=1331\u0026sent=239\u0026recv=335\u0026lost=0\u0026retrans=0\u0026sent_bytes=15426\u0026recv_bytes=129849\u0026delivery_rate=548003\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=14919\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=5aaaacc42e92cd5a\u0026ts=971\u0026inflight_dur=35\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (663)","md5":"2aefad0017a81a0c2e09dafdce6bc996","sha1":"256fc08f82223017b04a45db3458e10f2c8b0c2f","sha256":"cdf6cecf692dffa368209fcf9e5af56fc4a5aa888e2b622746db399c302f0185","sha512":"5d00ff312466904fe72873efddc88b8fc81609e375999e47c64f8b8927d21b76c5d5ab22313e5e9e4b6f8d5672898c8a670935159e06832b817a05255b5313e2","ssdeep":"768:qESO1+0IZqgH2+9VKsIp6zw2yrlJz+2LhN9PKrb02ISTau:qES++bqgH8swscHDlN26Sn","tlshash":"9b83e72e65f7202606a311b66fe7275a7b74d003d90ac9147aec438c4fc2da9de9335e","first_seen":"2025-08-12T16:25:11.610859Z","last_seen":"2025-08-12T16:25:11.610859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/research-consulting.jpeg?prompt=Chemistry%20consultation%20meeting%2C%20scientists%20discussing%20molecular%20structures%20on%20whiteboard%2C%20modern%20conference%20room%2C%20collaborative%20atmosphere","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/research-consulting.jpeg?prompt=Chemistry%20consultation%20meeting%2C%20scientists%20discussing%20molecular%20structures%20on%20whiteboard%2C%20modern%20conference%20room%2C%20collaborative%20atmosphere HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"134e6-68941d7a-120862;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 79078\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tIsVax2BY9xcvrFBPzC8620Tyx%2FfMFKGmiZtLEQIQl9NNXQMArZeHTp9sJVL59BNKTpl8g28mkxp9RZXUYLyPW0rBzwOBEmrVLSqtZf\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153296ac90b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79078,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"6a23e7466c096d012534bdc7924f2bd8","sha1":"7521c1241809acd89123a7a278674be8dd725c5b","sha256":"9783962ca08c4c4ad8921f040de56e684b0ed7911fd700b62570b5e6e1404791","sha512":"0cb1c55b00f6ae51d7b5d9aca171db92a4e878c8a1d6f3aaf72aa3cd48be16437896413d2b55205d108d9896a65b2f8afdbcdf93c820d16106fc510b40c75f8b","ssdeep":"1536:3uXQEi8WP5nys7rjrq9HAZM4Npuxqw+HDB2VWo5PEc1z+D7B8T0O2:jEi8WPZbdLuxqBF2Vy7qwO2","tlshash":"3873022af6a200a18ae3997814375bf0352b525ff8dce6d0de189cb89b4d759141c8fb","first_seen":"2025-08-12T16:25:11.61236Z","last_seen":"2025-08-12T21:28:51.121547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-michael.jpeg?prompt=Professional%20headshot%20of%20a%20male%20chemist%20with%20safety%20glasses%2C%20laboratory%20setting%2C%20confident%20smile%2C%20scientific%20background","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-michael.jpeg?prompt=Professional%20headshot%20of%20a%20male%20chemist%20with%20safety%20glasses%2C%20laboratory%20setting%2C%20confident%20smile%2C%20scientific%20background HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"13890-68941d7a-120867;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 80016\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oWx6UFdbhanaI0tZdMsvjch9gvNuqO7HHy371L3AcuTvnXMVPOSoF4zSXpM9qPh3yFOGqkP6v70sibbGseuhLlHRG5VHAofGxITlosQw\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153298ace0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"8f1b291bba48c9a4ab5f96a89bc778a3","sha1":"84df1c0feca53f2dc4ca03bbc78205708fc1e923","sha256":"14368e3aa35390ecab2aa19d5f428ce3f37a3a80786401cd5859eb3a605ce414","sha512":"1a3cc999b6f3f257aad86ef2620ab4a0d1bed1c025b7f2e7506383b2779879d227e0341c5017c81dafa2a5f0821e8ed6ebf9f2f5a5b77e233b0178d0ae9afef0","ssdeep":"1536:3c1r42DDjPrKToP8fv//okOyKk7+m4pTaa+oPzxSDgi+eeIxfkv:er4GjKoP8//o71VHsga8","tlshash":"fb730228fe6461bb9eca9e65670b2c23320b1364df57b7e71dd84e3251b9a32c540e1c","first_seen":"2025-08-12T16:25:11.614149Z","last_seen":"2025-08-12T21:28:51.125074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-lisa.jpeg?prompt=Professional%20headshot%20of%20an%20elegant%20female%20materials%20scientist%2C%20contemporary%20lab%20environment%2C%20warm%20smile","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-lisa.jpeg?prompt=Professional%20headshot%20of%20an%20elegant%20female%20materials%20scientist%2C%20contemporary%20lab%20environment%2C%20warm%20smile HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"11f76-68941d7a-120866;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73590\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6c8nsdoACXBo193gIYogxZZrRw6bSrHeguaXcKCBG0EViRqvMykRrJ2FtbBg9ueIj0yuv4P%2BIIlxAVyp1ykxZMW9REVV%2F4h%2BaOr4LhR\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153299ad10b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"2247545e648771787a20dda4e4620ee6","sha1":"72e3f90acf8e464a5ec0a1cf9f5c7c02dd1bded8","sha256":"5786f8fd57951d0bfd783314a923ad729438ad98682271926462ab19a0751bbb","sha512":"d9887bd3c7f4dd825b5ebb536884431972f8c10922212bcaa8b5b2eb00af294ddcc1eb583a5a20405e6f83ede32a3b16a29df5624a602fe9802bed6f7f27b934","ssdeep":"1536:3ompCzVjbcHlyXrB+alUHKTWXFdggf2N0dct9Y1q9w/4DimbGcUB:nCzFbcHlysaqqTQFdgOlct8qG8iE4","tlshash":"0e730261937a6508050e5bf7dbba984c715a568bdd0861a0ee440ceaeccae498371ff3","first_seen":"2025-08-12T16:25:11.615565Z","last_seen":"2025-08-12T21:28:51.128428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 12 Aug 2025 17:12:46 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6s7g7McQVA32wqv3TmgQgpkalu3YAIAHMCrpTbG8k5N8uqFJsl8ABy33yNHUBGyqnP2IhYrLEuz%2BeYqfM7hKryu5ovq3Cqh%2F7O0uhyaV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\ncf-ray: 96e15329aad40b4d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T12:53:44.188217Z","times_seen":418047,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-1lnch.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 Aug 2025 14:42:09 GMT\r\nexpires: Wed, 12 Aug 2026 14:42:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 6157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T12:55:12.815825Z","times_seen":256602,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":66,"dns":1,"connect":7,"send":0,"wait":10,"receive":11,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-1lnch.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 Aug 2025 14:42:09 GMT\r\nexpires: Wed, 12 Aug 2026 14:42:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 6157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T12:55:12.815825Z","times_seen":256602,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":110,"dns":5,"connect":8,"send":0,"wait":8,"receive":8,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-12T16:24:44.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 12 Aug 2025 16:24:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: no-store\r\nset-cookie: _cid=f839b22409e53a488511b8bfbb0d2e54; expires=Tue, 12 Aug 2025 16:25:45 GMT; Max-Age=60\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zk%2F%2Fuss8mmCrPbFivvy5LaPG1fKTrb6PdQf6J5fobmldO929BCQry%2FGSsgdgp3TVMOdLTSdjPJxU4h32TEMiZ%2FV%2BbCi5g%2F1Tcg6SIdpsRcp9byBrtPZiKKHXRHcAuOBq1Seg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96e153215eeb56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=548\u0026min_rtt=478\u0026rtt_var=168\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3261\u0026recv_bytes=1361\u0026delivery_rate=6454680\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=f432f74390d1731f\u0026ts=278\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2675)","md5":"07a031f7bbfd85cbfd1e26aee11cab4d","sha1":"f6ff1f8f0014316eecef296301e9ff4d72cae7ba","sha256":"da2fa8c9b8d324d1ac9794956619f02985ab1dd01feac70d2fb329d7f3c17aef","sha512":"0e27960d79720e352f9f5a0df04a679c0f36956df12013982e03f9aef70acd84175d952b6deb5c4423c1207300be8f63cf48b8b583fe365a21282e9360ec45ca","ssdeep":"","tlshash":"a95109c3fa962f95d1245b03b7c8659b02342dca34536c08e7d210ed1e65fa68ad70dc","first_seen":"2025-05-07T20:25:43.468773Z","last_seen":"2026-04-29T16:33:03.623836Z","times_seen":1247,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":107,"dns":87,"connect":1,"send":0,"wait":263,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 12 Aug 2025 16:24:46 GMT\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cefac584f3f405f13ebc242087b72fe2","sha1":"61e8908b3e6e2916f21305489b2be622918c4f5a","sha256":"57716caf3f4f606e956c7e14583dd52347337da28f85085c20193dedd325eed3","sha512":"792a95b2193a70300bd5bf1874ec6f114b793453a618d63208329372b35f365e7d297ad8b24400cd32f8e661231b550d9f7b8e4fa9472cf2b79c24abc6a54ff9","ssdeep":"192:wxAZgq3lblifxNktq346lDYxOLuq3/pl8xxruLq3iwllCxEtkq3RXlGV:Ye0bGo4VuCI","tlshash":"b4428b92402b9400ab971cc233cf7f3aaece50896485d1b96ff90cd59ceeda6436875d","first_seen":"2025-05-29T17:27:56.369842Z","last_seen":"2025-09-10T17:15:45.025994Z","times_seen":4055,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":133,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/nanotechnology.jpeg?prompt=Nanotechnology%20laboratory%20with%20nanoparticles%2C%20electron%20microscopy%2C%20molecular%20scale%20visualization%2C%20advanced%20scientific%20equipment","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/nanotechnology.jpeg?prompt=Nanotechnology%20laboratory%20with%20nanoparticles%2C%20electron%20microscopy%2C%20molecular%20scale%20visualization%2C%20advanced%20scientific%20equipment HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"1c7f3-68941d7a-120860;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116723\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IE8y41h4LZ9DJ%2BZKysUmmGVAn%2BAzauyB8uk0DhjtVeruvR8dIY4Bxq4WVnRkbiXucqwaQ0pm9tzP0GlIIqRu3MLWuQsQIh3yMndSw14O\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153298acc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"4afe1990751ca9f2bd50718194b3623c","sha1":"8cae52ee923a50e98dd83c2105e1565b0695dc68","sha256":"e635d9e7762f8ffee7d5120da163a03d88677916e0786aa6f5933439192416cc","sha512":"ee2407279d0d4c4303adefb2b224e4848c1523131752ecf9f4370906a444a725b37ca823884c72b5189ce741c926d8697ea5a796c37dffd8fdda3bddab272ec5","ssdeep":"3072:81LSsQ6W2onsyUPHk8cJvayNDRfIupzENQvkN04Yhdm0h:8xSsQ6W2oHU882XIup4QA0j9","tlshash":"3db3126ddb94da301ed6d12d5f342eeccbe58d98729640c324b5aa7102b27632f73748","first_seen":"2025-08-12T16:25:11.621521Z","last_seen":"2025-08-12T21:28:51.123322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-david.jpeg?prompt=Professional%20headshot%20of%20a%20distinguished%20male%20scientist%20in%20formal%20attire%2C%20academic%20setting%2C%20confident%20expression","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-david.jpeg?prompt=Professional%20headshot%20of%20a%20distinguished%20male%20scientist%20in%20formal%20attire%2C%20academic%20setting%2C%20confident%20expression HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82637\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ceboAwYcj7A79PnoB16LxuzxnVL5kA%2Fm5VpgSJMDbORC%2Bx1W7euQ2jxPtPAlS4m%2F3RKTTYySifXOCkMGQm1aYPd0JdqTzH6mURnb6tT5h9zIRRhjoQJQe9Oo9wDy3IupKN0m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncf-ray: 96e153298ad00b4d-OSL\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"142cd-68941d7a-120863;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=590\u0026min_rtt=0\u0026rtt_var=96\u0026sent=375\u0026recv=389\u0026lost=0\u0026retrans=0\u0026sent_bytes=190027\u0026recv_bytes=139593\u0026delivery_rate=7474924\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=14919\u0026ss_exit_reason=2\u0026cwnd=19089\u0026unsent_bytes=0\u0026cid=5aaaacc42e92cd5a\u0026ts=1062\u0026inflight_dur=97\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":82637,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"40ac698239cf7cd36a1d60053ffb837d","sha1":"db3ddce494adde39245367482188c54410be6da4","sha256":"b49d2c669c183daf425a004d5d0f63f3bb611086b3c898e8f751e8c556b2b920","sha512":"e4dc04e29a88481134b2a6de1c53965abf1d2244156fc4d312a835b1aa55794fe389c08b5b73f905f3f9007ca3aaa77eb4336b712bf6e932ca51a54215ecfbbf","ssdeep":"1536:3QsBG7vbCRfya9/TL5pUeN1SJEbxBdD7089sAjLRzRtvYIOsYMoK3iOa0zLrk0aZ:AGG7v2X97LXkEbxnD7089tlzRtvYITY1","tlshash":"448312f2c28c579c1cc1a1f4aac126554e61cf2d9977ab1cf78420c491de6fa89907f9","first_seen":"2025-08-12T16:25:11.622795Z","last_seen":"2025-08-12T21:28:51.126846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-1lnch.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 Aug 2025 14:42:09 GMT\r\nexpires: Wed, 12 Aug 2026 14:42:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 6157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T12:55:12.815825Z","times_seen":256602,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":64,"dns":3,"connect":20,"send":0,"wait":8,"receive":7,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/favicon.ico","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:45.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 12 Aug 2025 16:24:45 GMT\r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgVqnHf2De5ftMxIv4Jo2wc09bb0Cgdt09oxxwdOTjW%2FO4zWGEFQEHujlnyQrrE024t4BKF7vVuPVWYYLYHPiUwDR6MQFby8uFiVwZ%2Fa\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 96e15324dc0556a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-08-11T10:41:22.889824Z","times_seen":43374,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/custom-synthesis.jpeg?prompt=Chemical%20synthesis%20laboratory%20with%20round%20bottom%20flasks%2C%20reflux%20setups%2C%20chemist%20conducting%20organic%20synthesis%2C%20modern%20fume%20hoods","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/custom-synthesis.jpeg?prompt=Chemical%20synthesis%20laboratory%20with%20round%20bottom%20flasks%2C%20reflux%20setups%2C%20chemist%20conducting%20organic%20synthesis%2C%20modern%20fume%20hoods HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:03:01 GMT\r\netag: \"1c530-68941d7a-12085e;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116016\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 66104\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngiaQ8FG%2F6vyMNvaH3U%2BirKquC0ZYmIOLuwZHKYCRDk6YT1fcnnMeyCRPN3KIgZjlZdSxUWrsQLkwwllWtsQWaY0XfXHjbpSXFrTNbwZ\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153296ac70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"7892267ac9cceeee441a6e9c166c0c26","sha1":"4e98abdcd5badfe533a737b4a5c0e1b04916685f","sha256":"41a02d350f7657b6a674073beae41799090dfdc4cc2cd3134d5937950c4bf597","sha512":"4018f4835cad743e675a1cb166090406d24f3ec1dc0394a252dc92a388d435b74eef47accb2b1339eec4ee39e08fd357771aaba14ea67d6ce6d5190e29f7b5f7","ssdeep":"3072:3SvOJHmgCSGVxOKCyXwd7kn1Q1OMaCgh9/bhJL+symALP:3xJdGVxvCyAg1Q1FK/NyVP","tlshash":"7db312ebb41b0ac1f966a13c85e5b473fe25e3e993282708c5db67236ec2ce5d14251c","first_seen":"2025-08-12T16:25:11.623909Z","last_seen":"2025-08-12T21:28:51.119616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/pharmaceutical-chemistry.jpeg?prompt=Pharmaceutical%20chemistry%20laboratory%20with%20drug%20discovery%20equipment%2C%20molecular%20models%2C%20medicinal%20compounds%2C%20research%20atmosphere","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/pharmaceutical-chemistry.jpeg?prompt=Pharmaceutical%20chemistry%20laboratory%20with%20drug%20discovery%20equipment%2C%20molecular%20models%2C%20medicinal%20compounds%2C%20research%20atmosphere HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"1f4b4-68941d7a-120861;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 128180\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZOMqzShFfxeSEK2D7B8wzOLWX6Mle6k6rxzp%2BtvJXkU%2Fxg0t%2B%2BDF%2BuWl3DAxvoVSYVs%2B2auQTHfGwTAliDhGlqer9FeI%2BfFlIhJWBPR\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153298acb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":128180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"b63b3b0ab729c4600f802e0bdb36f4c7","sha1":"30c800d2f73fe248994cfeca9fe6ba12bf9420c3","sha256":"9f8a1541f46db76f1d523f8dd775d7e069a3f981a3190aa1edb4b674c6bec061","sha512":"0ca801dbe67f87dd758ee0cdfae3519a43844c4cd776ade2fcc3c492e8bb38460eb3a4641b0df9a34aa8061ab0b442489d2c079afc19b4b852ccf5c76a01d926","ssdeep":"3072:LjujhSGW8UduAH/Y07j82g0EZwo9ndRvgAANZNGaKc5w13:6hGrcAFjwFwoxdR4waZ5w13","tlshash":"81c3128aa6827ce3bb6b0270e07768951640d1c1fd70c8e84a0ed895f66e26977d74cf","first_seen":"2025-08-12T16:25:11.62513Z","last_seen":"2025-08-12T21:28:51.104859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-sarah.jpeg?prompt=Professional%20headshot%20of%20a%20female%20scientist%20in%20lab%20coat%2C%20confident%20expression%2C%20laboratory%20background%2C%20scientific%20atmosphere","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-sarah.jpeg?prompt=Professional%20headshot%20of%20a%20female%20scientist%20in%20lab%20coat%2C%20confident%20expression%2C%20laboratory%20background%2C%20scientific%20atmosphere HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:03:01 GMT\r\netag: \"10b54-68941d7a-120868;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68436\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 66104\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hedWQkI%2F51nDkuTRCfsiQrHUmZy4K3IONysTY8p1KbN%2Bm%2BYVkQUrGHbNzjMzfREKFemzRwq1V42FPQcwPe%2BI%2FVJp0k40dUsgy%2B7GXyU5\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153298acd0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":68436,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"b503825d2b61c385e8682d17138909c5","sha1":"d1c720de30dc23699d127073015ee4783a128ca0","sha256":"e3a937df4aa085b86baca98ed179c1ed152900d884a4a49ff2d6671ed0e19bfb","sha512":"206d68a177588f967918122680b22fb07ed73cbeb527e05f42e734f5e89c4227d66904b3e37129ed29bf90347714b661b99fe53b292eb635e01c1f6b39269e6a","ssdeep":"1536:3iBxGWPfTyRBuyis50zYD5MdLh/h775jV7oVVFrLfCFaot:SqWPfGQsCzs5MLhf55oV/TCFR","tlshash":"1963028c7e899bb8c9067d39ebaaa753d8573a20bcd06326364d915c3e5431d0fd91cc","first_seen":"2025-08-12T16:25:11.626586Z","last_seen":"2025-08-12T21:28:51.10756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/reviewer-dr-james.jpeg?prompt=Professional%20headshot%20of%20a%20friendly%20male%20analytical%20chemist%2C%20modern%20laboratory%20setting%2C%20genuine%20expression","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/reviewer-dr-james.jpeg?prompt=Professional%20headshot%20of%20a%20friendly%20male%20analytical%20chemist%2C%20modern%20laboratory%20setting%2C%20genuine%20expression HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"108ff-68941d7a-120865;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 67839\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLAyAvTOwNGLYbfgU4yxVIe0cAeG6dFtmqLEpbk%2FHbLZJ5mkm79jx5IqAIFhAlLDl8vdYpP33O0PJHlHAG83l%2Fz6n91op6nAdEKqAAoW\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153299ad20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"58c46c685984392a17ba6b04f91eebf1","sha1":"a0e49472c36cc40b003201a5234d756907c60842","sha256":"141233696857d72bdc88ad95778362e6a077bcd505e3b13300e3c612ba10d47a","sha512":"a036e98fd481e7f0f45a50a73fb1aa5ff5327c1b8fbd54bf8a8949c7d793c137b0f631b27490ce76b294d19b77e36d2fedc65df7f1a277043393c3de8161f894","ssdeep":"1536:3haD6TpeYpCaUFU1sFfrCeUfGUiBuBvdsM8vButzMPQmGb26n4IZSLv+:RaQ7Bh1sFfMVicBvdsXBuGPLGS61SLv+","tlshash":"0463025af522a68c643f13f698f58d4cd234abab36d2534e7d818a05779130fb82dc87","first_seen":"2025-08-12T16:25:11.627826Z","last_seen":"2025-08-12T21:28:51.130115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/chemistry-lab-hero.jpeg?prompt=Modern%20chemistry%20laboratory%20with%20advanced%20equipment%2C%20glass%20beakers%2C%20molecular%20structures%2C%20blue%20lighting%2C%20scientific%20atmosphere","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/chemistry-lab-hero.jpeg?prompt=Modern%20chemistry%20laboratory%20with%20advanced%20equipment%2C%20glass%20beakers%2C%20molecular%20structures%2C%20blue%20lighting%2C%20scientific%20atmosphere HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:42 GMT\r\netag: \"1c13b-68941d7a-12085d;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 115003\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCjk5XvhvK9KYVlsotTL158Q3vsg1WVd8E7mxi1qSJJeQ4HQyJT0tzbZAwE6SJ6DCvu4bJmWpaP5pz7OagkrEczQlLzdiBrK1dBdOqY%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e1532aeae20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115003,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"dae9d5dca7d58e1859bcbcf4dcfbad13","sha1":"8a8d24789f00d73b2244faac08337fb10c2f932c","sha256":"ae23aa67db6677758cde2c71d11fd98430ec77d1d1549024e848cba82071ddab","sha512":"ee44ac47337d7fb18e0ec47ecd38c76bccd6c97eb605126426ad379162c77bf2b41885e048baadba84742af1606f60d2f83f4ea9e73a9a394ceaa71d6723f9ba","ssdeep":"3072:/cVJP8XkXrERmjA3sXeJTcSDHn6YrQ8I7DAa+m:OP8jmjUswzTrrtIoHm","tlshash":"dfb3122d88cdb474dabd2c76852f4efcd705c2eeea65f09f0d4011bd48de54481668b6","first_seen":"2025-08-12T16:25:11.629093Z","last_seen":"2025-08-12T21:28:51.110124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/inter/v19/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app-1lnch.eu.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 Aug 2025 14:42:09 GMT\r\nexpires: Wed, 12 Aug 2026 14:42:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:51:44 GMT\r\ncontent-type: font/woff2\r\nage: 6157\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-11T12:55:12.815825Z","times_seen":256602,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/aeva-chemistry-logo.jpeg?prompt=Modern%20chemistry%20logo%20with%20molecular%20structure%2C%20hexagonal%20design%2C%20blue%20and%20green%20colors%2C%20scientific%20style","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/aeva-chemistry-logo.jpeg?prompt=Modern%20chemistry%20logo%20with%20molecular%20structure%2C%20hexagonal%20design%2C%20blue%20and%20green%20colors%2C%20scientific%20style HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"7e18-68941d7a-12085b;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32280\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4e7vSN1dB79lrvI9lyvE5kkr4ljqx7knpOWrQhzPH2y0K8zxsh7bBbvU%2BF18OIBAF9LsbvYS8ywaionckaXKnPCYS1PHKHlyniPKRoO%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e1532c4b030b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32280,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"a5546c89f4e81b89d84fe8388b2da844","sha1":"ca1014f917605693952dd5e6d97cbfe5b9a15423","sha256":"c9988a6ad535a00ba565b6968d5063508bb15664d4e454eeb0a578d625348ce4","sha512":"c4e61a17e17873be3e55103fa8d413e0d20c659616a8f64c4962747bb06da86d964de4ec680e5c18233315ef15b3bc40c9257f047d00fb5faf7c62fc497ac236","ssdeep":"768:3+WuIkc3wOzViGFcz9U6T6z/a8aS/nbA6BNiyJtWY:3zuIkOzUocze6TyFaAn8UNlLWY","tlshash":"85e29d838d04cb83b98883f9be025cad7e4d931ded527add10619fca2b205631ddb49e","first_seen":"2025-08-12T16:25:11.630728Z","last_seen":"2025-08-12T21:28:51.116976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/aeva-chemistry-logo.jpeg?prompt=Modern%20chemistry%20logo%20with%20molecular%20structure%2C%20hexagonal%20design%2C%20blue%20and%20green%20colors%2C%20scientific%20style","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/aeva-chemistry-logo.jpeg?prompt=Modern%20chemistry%20logo%20with%20molecular%20structure%2C%20hexagonal%20design%2C%20blue%20and%20green%20colors%2C%20scientific%20style HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"7e18-68941d7a-12085b;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32280\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWg%2FoExzgcM6cd24nhNyahcCLy7LK8qG3iOj7zQlaj0UbKy44lQ153YHPteqhA0pz2RcdjHGd26%2FtHblh3B%2B2Q0%2B6QXo0tgJUD7u6brB\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153296ac40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":32280,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"a5546c89f4e81b89d84fe8388b2da844","sha1":"ca1014f917605693952dd5e6d97cbfe5b9a15423","sha256":"c9988a6ad535a00ba565b6968d5063508bb15664d4e454eeb0a578d625348ce4","sha512":"c4e61a17e17873be3e55103fa8d413e0d20c659616a8f64c4962747bb06da86d964de4ec680e5c18233315ef15b3bc40c9257f047d00fb5faf7c62fc497ac236","ssdeep":"768:3+WuIkc3wOzViGFcz9U6T6z/a8aS/nbA6BNiyJtWY:3zuIkOzUocze6TyFaAn8UNlLWY","tlshash":"85e29d838d04cb83b98883f9be025cad7e4d931ded527add10619fca2b205631ddb49e","first_seen":"2025-08-12T16:25:11.630728Z","last_seen":"2025-08-12T21:28:51.116976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/analytical-testing.jpeg?prompt=Modern%20analytical%20chemistry%20laboratory%20with%20HPLC%20and%20mass%20spectrometry%20equipment%2C%20scientist%20analyzing%20samples%2C%20professional%20setting","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/analytical-testing.jpeg?prompt=Modern%20analytical%20chemistry%20laboratory%20with%20HPLC%20and%20mass%20spectrometry%20equipment%2C%20scientist%20analyzing%20samples%2C%20professional%20setting HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"13fbd-68941d7a-12085c;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81853\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiJnT3ejWqmklUmsOwkkY1Mg%2FjSujQJK6BlRloed%2BQmMFc16nqH1lS0lGecMpcH%2FVKVRmvGyp2YtyYBXQv7r9P6lIN6zl00E4ur25cXE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153296ac50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":81853,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"6c660c68db3c52c5844791f1aa8df31c","sha1":"a7b2e5c2cb6762bfd243a5005997f6f4611c01e0","sha256":"428fd0de47d378ad319662769ef7db08c79a9b8a6268301b6103ac187d75190a","sha512":"7c36c974452a2daaaee6d910b399e6843634018b9a0c1baea5bcea30eac05f53317c12749e2f4c0b94a7a1aa91dcfc2e96c8b49ed039198e6647c8db9b7ec874","ssdeep":"1536:3UvqDVI1mGYdJIyg4i7ZmviZfpe35p89jzfGeOTRsqg3yxo0ESR3DJsW0zgKlu+l:nz/w+i7wKZfp+5C9j7eTqqgmhT1s5gKt","tlshash":"ae831276e8f1d1567aabbef44176206ed219880a9e350776dfd330e447aaca0183877c","first_seen":"2025-08-12T16:25:11.631833Z","last_seen":"2025-08-12T21:28:51.1125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/about-chemistry-team.jpeg?prompt=Professional%20chemistry%20research%20team%20in%20modern%20laboratory%2C%20diverse%20group%20of%20scientists%2C%20advanced%20equipment%2C%20collaborative%20atmosphere","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/about-chemistry-team.jpeg?prompt=Professional%20chemistry%20research%20team%20in%20modern%20laboratory%2C%20diverse%20group%20of%20scientists%2C%20advanced%20equipment%2C%20collaborative%20atmosphere HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 22:03:01 GMT\r\netag: \"160a2-68941d7a-12085a;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90274\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 66104\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niEP8DAtO%2FBtRhT3ShuqygMrMflDDE5WceB%2FF%2FLBQSJ0lQrJKA8HOdiAY5DR0GCSLFdwALIlhi4kfEORdG8PIhYRN2AUeyEepH%2BhpDX1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e15329aad30b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":90274,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"74ee7f90cd7fc11bc74db3eff8031e7f","sha1":"672a3ee679e4eb695dc9efee5f631600f1c89444","sha256":"21aaee88517b44c9bdccd6f5e39138c473a67b9006b39c8db3972e4caa16ab9f","sha512":"7da793814748cc4a14e2a61f2ba88ab19a64fe12ca687ad9b699d818c4f5d415e87dcdd36721b6c585ec733046cf64473f61362052933441a41346f26f276220","ssdeep":"1536:3sd7SeAm8TSw79fR15ZTA1cjxNOoOnLT1EOLBj/sb5X+qMbPIubk7cPUlgXg:M58+0z15ZTA1cjfQLT1JGbaQqPNQ","tlshash":"af9312559f8e96120078d0f9e7eb26625bcda7208740398c32428e4cf6558cef458ffe","first_seen":"2025-08-12T16:25:11.633059Z","last_seen":"2025-08-12T21:28:51.09456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"app-1lnch.eu.com/assets/green-chemistry.jpeg?prompt=Green%20chemistry%20laboratory%20with%20sustainable%20processes%2C%20renewable%20materials%2C%20eco-friendly%20glassware%2C%20plants%20and%20natural%20elements","fqdn":"app-1lnch.eu.com","domain":"app-1lnch.eu.com","tld":"eu.com"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE","date":"2025-08-12T16:24:46.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app-1lnch.eu.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 06:53:07 GMT","end":"Sun, 09 Nov 2025 07:50:52 GMT"},"fingerprint":{"sha1":"CD:39:9D:FF:AF:66:49:A5:AC:15:D8:B1:76:B6:D8:BA:A2:F6:5D:46","sha256":"84:56:1E:AC:94:5A:77:E7:CB:62:3D:84:7F:E7:21:6A:76:8A:1C:D8:EF:29:77:53:11:49:1E:56:6B:7D:DF:CE"}}},"request":{"raw":"GET /assets/green-chemistry.jpeg?prompt=Green%20chemistry%20laboratory%20with%20sustainable%20processes%2C%20renewable%20materials%2C%20eco-friendly%20glassware%2C%20plants%20and%20natural%20elements HTTP/1.1\r\nHost: app-1lnch.eu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app-1lnch.eu.com/?gad_source=1\u0026gad_campaignid=22876209023\u0026gclid=CjwKCAjwhuHEBhBHEiwAZrvdcitj2oJDVZpAbbSEcPxPbuGBAGXCeY2qotI08Yor-mPAiflKqus-6hoCQZcQAvD_BwE\r\nCookie: _cid=f839b22409e53a488511b8bfbb0d2e54\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 18 Aug 2025 08:06:41 GMT\r\netag: \"202bd-68941d7a-12085f;;;\"\r\nlast-modified: Thu, 07 Aug 2025 03:28:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 131773\r\naccept-ranges: bytes\r\ndate: Tue, 12 Aug 2025 16:24:46 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 116284\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdkAXrYV4I5W0wubG6DJKJg4TMWDzue4tcR4G0YVXPE7fl7XB%2BwsLePod1ruOnTzijt%2B1kXbCm1Az6TvGdgIveKOelk1uFXz2TsumTNE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96e153297aca0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131773,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"3a20a8f074ae8b8fde00bd784ab419df","sha1":"98eec0b9d49e411abb720f2627796359d0af4e77","sha256":"e613d2e9bc52091bdf59a95315dc0e00eb42785d11072edbccd3615ae7d3e472","sha512":"c4588a83208cf230f7df0b116fad42e3cecd453e93dd5f2f1c455171790d6effe92e2d4b4a668d9971b0760ab9411a0ba9361d3cc2547fca5f60df09e9eda80d","ssdeep":"3072:ruBWikLyThYpQrHQHYqghEjbqrzlDCesSre:VDLyTlHQahEyrz4v","tlshash":"bcd31268f3e7ec40d8821a377599e2ad4f358512b70c9250ab6d4bf6d7cd00792863fa","first_seen":"2025-08-12T16:25:11.634293Z","last_seen":"2025-08-12T21:28:51.10199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Mamba Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","mamba","aitm"],"meta":null}]}}]}