ℹ This origin was compromised through ANOTHER door — host sse-demo.nubizzi.com (CVE-2026-109619, at 2026-11-03T16:42:24+00:00). Through THIS door (php-app.mei-proxy.com) nothing ever landed — that is the point of the demo. The box is shared; the red banner lives on the other door. POST /reset.php clears it.
Customer Support Portal
Running PHP 5.6.40 (EOL 10 Jan 2019 — no PHP2Shell backport exists or will ever exist) · Apache/2.4 mod_php · phpinfo() · status.json

Sign in

(demo / demo)

#CustomerSubjectStatus
10431García Distribución S.L.Invoice 2026/0312 not visibleopen
10429Beta Mantenimientos_meter reading rejected (validation)open
10422Nordic Cold StoresTariff change request Q4pending
10418Herrera e HijosPassword reset email never arrivesclosed

© 2016–2019 Acme Utilities S.A. — This portal is a demo honeypot: exploit traffic is detected and logged, nothing attacker-controlled executes.