{"report_id":"510a78b9-0bd2-42d2-872e-1a1c191986f4","version":0,"status":"done","tags":["google"],"date":"2026-09-14T20:09:14Z","url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"title":"Sign in - Google Accounts","dom":{"size":173513,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"f676f2403a11ca33cf45ce0c691c66c1","sha1":"c0362a8c31a8097dd14b35443e5b8556bf8416f1","sha256":"7557ed71fab8ac7055241de951ef9ac814ddfc83e61e03574f8fb23649411a0b","sha512":"e78fb5355a0b8306b84c5ff1db2a64e5e586e7a619ef6b3740f0a72ed9cb7171088ea5307bb6f2890b3dd79a209a85f014c4be90d210777d46c47c52d7e96ea2","ssdeep":"1536:3Tk+Vlk+VSk+VcituVX3vPMINkOpFW2o+wxaE1lxhknmkwGAN:3BituVX3vPMGkCo++akc2N","tlshash":"7104a3caca732077bc23227957ebca48b374d483d519dfb17eec46468f896e904a6350","dom_hash":"domhash112187ead1a800c8a073075b0c4e0bdf","first_seen":"2026-09-14T20:09:16.895989Z","last_seen":"2026-09-14T20:09:16.895989Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T20:09:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"summary":[{"fqdn":"iwuaawdjdwja.com","ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-10","domain_rank":0,"first_seen":"2026-09-13T07:50:29.255248Z","last_seen":"2026-09-13T07:50:29.255248Z","alert_count":276,"request_count":46,"received_data":691600,"sent_data":31673,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"936e0e9c6e695b38b1114c78648c1d8e","sha1":"ea688f9fe6c48fe65dc5a2f9a43bc281ce637af2","sha256":"2e740bd038b2485a01f3c782e4b324dcd2612dc19e90d3a10a96fb149efab836","sha512":"fe486ad99511ac614c43d56424b90973730d6decc5bfbbfc1233933aa2a31deea6382ec4b1c6364ab58e881911eeb9cd6bfe2c1d7064294c9bbfbb0bd4a9a23d","ssdeep":"","tlshash":"fe81253a626229361cef4099affba7a07dd3603b8155e901705cde856f5cd0006b9fed","size":4061,"data":"","first_seen":"2026-08-11T22:06:30.907083Z","last_seen":"2026-09-14T20:09:16.923024Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ad2bdddd946bd154f5878c355eb5348","sha1":"d324a5c2e10fdb27ccac1d1ac18893f786072ce8","sha256":"bcc520c1886076241bb3fc4ae84529acff4f2067a0f07c81fcceb74037d06685","sha512":"40dc6d96dedc4090daafca64b4e302161254e033f46c80522f87a2486064c95e262aaf1cd09f74f8abdf1440cbb6316f1083e17a12991ba1875482989b4df854","ssdeep":"","tlshash":"33c09b9e5491558d26d618714a07711524bb08f7040c5a44e14197a6a57d37f4357a8a","size":132,"data":"","first_seen":"2026-07-16T21:08:02.087495Z","last_seen":"2026-09-14T20:09:16.923606Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3272d7e399d667006c1349637d7e3bb","sha1":"5ce347444ffc5966f0f136af6f5dcc9677b6814b","sha256":"ce2f2c2e7d30c4c1280528efbdeb1e37d0bedc9000a47522287ba4dc794669dc","sha512":"d82b0e27423c664f339e957be32494b7da7bfa6646f2b210fbc29dffce8d3c83897f4472d442a125be65eb273b84ce0e2bd6110c3c1236769db089374b547802","ssdeep":"","tlshash":"6611899aa49b18f90873b4bb4b2fa6083127c003140bce523b9ca7082f3686a4216fd5","size":943,"data":"","first_seen":"2026-09-13T13:02:43.419967Z","last_seen":"2026-09-14T20:09:16.924116Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/lo.js?v=1789416523","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08658c97ce98dd769fafbc31aa0dfc23","sha1":"db93827706cf007d9317cb9c6b580f391411ae14","sha256":"3df45a299f1668b2179daa2a604367da744b23a4480dd3f662a5fca3339520c6","sha512":"343f5693d459fc446b0126b77c1ad340b8f20bbfe883dd11c1dc3832b5affdd95c26729f3179fade12e9a3aa24ee77e2c5ade0f20ece6cdaca605deffa9e25fb","ssdeep":"","tlshash":"1e31fd5b6ab3503517fb62b9096b0904395a05a70b0ac9463e0c4160cfb5bbb8135ff9","size":1814,"data":"","first_seen":"2026-09-13T00:47:22.585711Z","last_seen":"2026-09-14T20:09:16.915446Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/logger.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ae1fac5c7992701dba6466b919a449c","sha1":"cc175b8dd564b2bfc356e7ed91019d6f08660dad","sha256":"85e776ea81cbe5ca15bb3cad0ad0a453b50278e84867069b7a24b6e3a43a6f35","sha512":"f6f2ad9d1032e36d9f683d444e8576651b3ad1647f4b07142ac26845d1ee3448fe207331eb9813866217771388d1885b6cf3b40a4eb27136bbf086d868205a5a","ssdeep":"","tlshash":"32110c1b35be0071523b20be058f9700ba65c5c70616cf123e8c2622ef18d7e1ab9b89","size":877,"data":"","first_seen":"2026-08-11T22:06:30.904897Z","last_seen":"2026-09-14T20:09:16.918897Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/activity-tracker.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0831c2d1254e3ee5d3a03d115855de0a","sha1":"123a26583b1d3c43139b877f2dd17d1be76be3eb","sha256":"6a47696eaba6f35a08efdcd4a03d6e5817968f39480a780ceb1eb544caa8e465","sha512":"2a9302bc3a0adb40dfd54d7780413f78b6808f595b44cd61fcb265ab41fab9f668959e03c708936c88d252b105e129b1fcaf6aa7686418e28ad26a4dc6b306f4","ssdeep":"96:Aeq1AhyxjIBMxQ8MT7e1HH5+HXOqbpyDwr5Hk2nXwuJ6AGLwsxOT0b:vq1AhyxwME3eNkXbp/nhJ3QwhG","tlshash":"2cd1849aa8e321b1b977307e47ef7101393b40471406c950be5daa049fb8e6c02b6fde","size":6572,"data":"","first_seen":"2026-08-11T22:06:30.899673Z","last_seen":"2026-09-14T20:09:16.922455Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/device-detector.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09e1ecf015837733d349467996e3464f","sha1":"25cd8988056bad199f3907d71b3fb01d744dafd2","sha256":"3e56830ea38e9bfb8e324b1995c60b0f7ae4dce529d9a67dd27a23705888fb8f","sha512":"8e98831b86e06bb41ba863031696530b6e8fddcad46bb021dfaf38070b7ee4d46ae710ed48903ae8ee2bf0e3139d9fcb037034d846958f70b892569b79bdcb27","ssdeep":"768:M9AgbMRdWMxaEKBK/4DKHBu2P6fcuqhU4CTToMrdeUwod8GroNea:MmcEKBog/q21YNH","tlshash":"ad13293fe312b7144396ed99d80740009e365c2aee95b4a5f9d8b640eec68b121bff71","size":42820,"data":"","first_seen":"2026-08-11T22:06:30.895307Z","last_seen":"2026-09-14T20:09:16.914827Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/code-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1d428384ea064292c3b52f6207f68e","sha1":"ccc860d664cf9adf4af5083e856d2a8ffc71632b","sha256":"1eccdd5b45b15434f48572cc940ffea43bef5c3067c7bab3b79181f57e69eb2f","sha512":"608ce1a5e8b4fe038d817ce571eceda225907f05067b46f964cf9c5d0ad14750cae90f281a3c82aebd7ec1aa3ce1bf5a6b94906e0916c200e26dfb8a1c0162ea","ssdeep":"","tlshash":"38512e18e8e31bb59777b07a837f102a31a0104f2488c952bc5c92601fe1e6431eaaea","size":3039,"data":"","first_seen":"2026-09-13T00:47:22.589534Z","last_seen":"2026-09-14T20:09:16.91009Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/gauth-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2d673aaef4bbe6be92ecd77cdedf2e1","sha1":"9df6116ee08b76359d04cc56da932e1b31cf0f1f","sha256":"b4156c5c0e6e7bcb3ef914cc7340640af5ba9259b15fb4ae6d2ae173f3a57766","sha512":"35b3c36205b8d0eb02231094c1a52724cd2146b7736bcde9fd0d351c7f37643a7e1e459f1d01ff420dc4fef09470dc758bc91b7a1a00e96ae564a161c3c35110","ssdeep":"","tlshash":"c86131a6b1a15db1457b1bb793eb83c67278400ba40ae4463d6c13859fe9c508375bc9","size":3187,"data":"","first_seen":"2026-09-13T00:47:22.587283Z","last_seen":"2026-09-14T20:09:16.920009Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/jq.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","size":280364,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-15T04:03:07.416539Z","times_seen":2595,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/py.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"179c2f04aff2d23f8cc3085318e071f3","sha1":"c92220130d70ffe02fe97fdcdb570a478a6e3e37","sha256":"4532984c494e94d7e4e1b66a83ba92f6696a0be16b76c40fe4fd60f631dc38a3","sha512":"6b860722b9c3833832360c783715c913d0affc0b9a5566f79aa26bc9c298fe852befe6789ac4a1a35ebaf3f623147cf7124a0ceb3f778ba05600dd8570b6e848","ssdeep":"384:AH24Y62HPCIzNXI6z7zByMnIEoipedWKRXzG:k3Y62HPw6H0EoiprQXzG","tlshash":"baa2cd8cfaf361e08227b13d47df95466634c993080ced657c4c5a606f12eac56f9be8","size":22474,"data":"","first_seen":"2025-01-13T22:55:36.921043Z","last_seen":"2026-09-14T20:09:16.921988Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/pw-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeea57035ae8f0d19cd1ac5252686980","sha1":"08bdd6aa8d1e93b6da1279940f5f7428aae0d381","sha256":"f21100d61c95c30f0c3e614be95b5daeb9b6a6719d0243e6bb95912f97886364","sha512":"369e8cb18df6e1f0b8cc9005675bfd0e258364f76b9e24fb4e8b9890d6edd1bc96c71dbf1384b2e0607dbdf92940244738df420e0147ee826df76d6c8259c11c","ssdeep":"","tlshash":"3e313367f4932ab09ab7a67f57ab81493175400b240bc2103e1c975c7ffed1a8276bc2","size":1504,"data":"","first_seen":"2026-09-13T00:47:22.593012Z","last_seen":"2026-09-14T20:09:16.920716Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:00.294Z","timestamp":1789416540294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:00.692Z","timestamp":1789416540692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 194\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":194,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":16033,\"ts\":1789416540690}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T20:08:42.968Z","timestamp":1789416522968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 22893\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"fl61t9vcj5kska6a295pt75uqb","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=fl61t9vcj5kska6a295pt75uqb; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":180878,"size_decoded":23392,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"a5826a7a7e21a271b86897ee435514bc","sha1":"c368faa7b6a1d0579a7b5b912950515fad8bce69","sha256":"a82ed42abc428c0955f73fbd77a5d3b1418c2a2e7d4e4da885175f655e838a60","sha512":"4139812cc72d99c236cb3bbd11fd55bb2cb2792cfd04fd817658b23e3bffbf649c624b2dd93172fc891acf40e0a815cbdcf3894dd79bda8fec05de3a145d18b1","ssdeep":"1536:KTk+Vlk+VSk+Vcvt7iX3vQMINkOpFW2o+wxKE1qqT7hibyCnnQmG:KBvt7iX3vQMGkCo++KkWG","tlshash":"fa04a3caca732077bc23227957ebca48b374d483d519dfb17edc46468f896e904a6360","first_seen":"2026-09-14T20:09:16.903663Z","last_seen":"2026-09-14T20:09:16.903663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1096,"timings":{"blocked":-1,"dns":243,"connect":41,"send":0,"wait":680,"receive":41,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/code-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.205Z","timestamp":1789416524205,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/code-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:00:03 GMT\r\nETag: \"bdf-658d0c8a5c9eb-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1124\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3039,"size_decoded":1544,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bd1d428384ea064292c3b52f6207f68e","sha1":"ccc860d664cf9adf4af5083e856d2a8ffc71632b","sha256":"1eccdd5b45b15434f48572cc940ffea43bef5c3067c7bab3b79181f57e69eb2f","sha512":"608ce1a5e8b4fe038d817ce571eceda225907f05067b46f964cf9c5d0ad14750cae90f281a3c82aebd7ec1aa3ce1bf5a6b94906e0916c200e26dfb8a1c0162ea","ssdeep":"","tlshash":"38512e18e8e31bb59777b07a837f102a31a0104f2488c952bc5c92601fe1e6431eaaea","first_seen":"2026-09-13T00:47:22.589534Z","last_seen":"2026-09-14T20:09:16.91009Z","times_seen":16,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:48.691Z","timestamp":1789416528691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 193\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":193,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":4033,\"ts\":1789416528690}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:52.999Z","timestamp":1789416532999,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:53 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:58.294Z","timestamp":1789416538294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:58 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:08.692Z","timestamp":1789416548692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 194\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":194,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":24033,\"ts\":1789416548690}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:08 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:09.299Z","timestamp":1789416549299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:09 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/fonts/roboto-regular.woff2","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.605Z","timestamp":1789416524605,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /fonts/roboto-regular.woff2 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 279\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":279,"size_decoded":572,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c90c71c23195a6cfd5de71a1fce7d1da","sha1":"017a7b729a403e7938c2d54ec00b7b427a1fef37","sha256":"e0341a0ef8a0beddf7db2edbd570b7195d1ef4f4c20ff087f0e25eaf123e9feb","sha512":"e304ab549e7e61109df9cf003c6d1215e58fe08e24165135979810b6eddc469942ffbb772ea3a3c0f8ba1a1b7d57cf5cb42b9aec5119313937fa68f7efbfed88","ssdeep":"","tlshash":"52d02b9e5043639b4c12195039c115c2268e23f6b43a86e82dc7d487529863ecddaa8d","first_seen":"2026-09-13T07:50:33.095644Z","last_seen":"2026-09-14T20:09:16.911266Z","times_seen":12,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/images/1.ico","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.654Z","timestamp":1789416524654,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /images/1.ico HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sat, 08 Aug 2026 23:02:19 GMT\r\nETag: \"1536-658911cec14c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5430\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5430,"size_decoded":5808,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f3418a443e7d841097c714d69ec4bcb8","sha1":"49263695f6b0cdd72f45cf1b775e660fdc36c606","sha256":"6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770","sha512":"82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563","ssdeep":"48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B","tlshash":"65b1b8b7e6c63030c85805bc49373a6d1e1b6ee31a9cf064fecc326a1a320d175256be","first_seen":"2023-04-05T04:39:39Z","last_seen":"2026-09-15T05:57:24.722022Z","times_seen":89584,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:48.693Z","timestamp":1789416528693,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:55.195Z","timestamp":1789416535195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:55 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:03.294Z","timestamp":1789416543294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:03 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:06.296Z","timestamp":1789416546296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:06 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:07.296Z","timestamp":1789416547296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:07 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/device-detector.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.195Z","timestamp":1789416524195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/device-detector.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"a745-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15387\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":42821,"size_decoded":15810,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36071)","md5":"09e1ecf015837733d349467996e3464f","sha1":"25cd8988056bad199f3907d71b3fb01d744dafd2","sha256":"3e56830ea38e9bfb8e324b1995c60b0f7ae4dce529d9a67dd27a23705888fb8f","sha512":"8e98831b86e06bb41ba863031696530b6e8fddcad46bb021dfaf38070b7ee4d46ae710ed48903ae8ee2bf0e3139d9fcb037034d846958f70b892569b79bdcb27","ssdeep":"768:M9AgbMRdWMxaEKBK/4DKHBu2P6fcuqhU4CTToMrdeUwod8GroNea:MmcEKBog/q21YNH","tlshash":"ad13293fe312b7144396ed99d80740009e365c2aee95b4a5f9d8b640eec68b121bff71","first_seen":"2026-08-11T22:06:30.895307Z","last_seen":"2026-09-14T20:09:16.914827Z","times_seen":18,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":44,"receive":41,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.662Z","timestamp":1789416524662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Length: 218\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":218,"data":"{\"action\":\"event\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":0,\"ts\":1789416524657,\"event\":\"viewing password\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:51.998Z","timestamp":1789416531998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:52 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:04.295Z","timestamp":1789416544295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:04 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:08.296Z","timestamp":1789416548296,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:08 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/lo.js?v=1789416523","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.196Z","timestamp":1789416524196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/lo.js?v=1789416523 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Thu, 10 Sep 2026 03:03:06 GMT\r\nETag: \"716-65b1834fc9930-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 533\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1814,"size_decoded":953,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"08658c97ce98dd769fafbc31aa0dfc23","sha1":"db93827706cf007d9317cb9c6b580f391411ae14","sha256":"3df45a299f1668b2179daa2a604367da744b23a4480dd3f662a5fca3339520c6","sha512":"343f5693d459fc446b0126b77c1ad340b8f20bbfe883dd11c1dc3832b5affdd95c26729f3179fade12e9a3aa24ee77e2c5ade0f20ece6cdaca605deffa9e25fb","ssdeep":"","tlshash":"1e31fd5b6ab3503517fb62b9096b0904395a05a70b0ac9463e0c4160cfb5bbb8135ff9","first_seen":"2026-09-13T00:47:22.585711Z","last_seen":"2026-09-14T20:09:16.915446Z","times_seen":16,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":55,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:47.608Z","timestamp":1789416527608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:57.293Z","timestamp":1789416537293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:57 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:02.294Z","timestamp":1789416542294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:02 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:04.692Z","timestamp":1789416544692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 194\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":194,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":20033,\"ts\":1789416544690}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:04 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:05.295Z","timestamp":1789416545295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:05 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/plugins/@fortawesome/fontawesome-free/css/all.css","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.192Z","timestamp":1789416524192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/plugins/@fortawesome/fontawesome-free/css/all.css HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sat, 08 Aug 2026 23:02:20 GMT\r\nETag: \"1e1ce-658911cfb5700-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 19486\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":123342,"size_decoded":19902,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"fe11a3a32db7284d920063f21e7d3777","sha1":"850d2a2e0b6c640e41c71b2dab4b9d8cc562cdf6","sha256":"f155c0695c709ebdf9b5ade6f73516572a1fda0ad53a2577cd67c27309a53bb8","sha512":"13ee779179c9cae6454b3ef9c529937c2a54363de0a7d05df344de4103133c94d55834473cea4461ccc6c16b6c657bda8b3dbb72abe1747f14fa0fcd318b9adc","ssdeep":"1536:i8mrmZmrm7mrm8mrmCXmrm9mrmPmrm8slCB7Wm29eCFIEXoMEPlO6CxpIt2xNnJB:DmB7Wm29eYoMEPlOEt2xNnI6","tlshash":"9fc377fa90ff10d48311e4892747e2a4b739b62c9c0b4c58e2a67d8de6c065cb1d6bdd","first_seen":"2023-04-17T06:41:49Z","last_seen":"2026-09-14T20:09:16.916725Z","times_seen":273,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/logger.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.199Z","timestamp":1789416524199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/logger.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"36d-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 390\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":877,"size_decoded":809,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9ae1fac5c7992701dba6466b919a449c","sha1":"cc175b8dd564b2bfc356e7ed91019d6f08660dad","sha256":"85e776ea81cbe5ca15bb3cad0ad0a453b50278e84867069b7a24b6e3a43a6f35","sha512":"f6f2ad9d1032e36d9f683d444e8576651b3ad1647f4b07142ac26845d1ee3448fe207331eb9813866217771388d1885b6cf3b40a4eb27136bbf086d868205a5a","ssdeep":"","tlshash":"32110c1b35be0071523b20be058f9700ba65c5c70616cf123e8c2622ef18d7e1ab9b89","first_seen":"2026-08-11T22:06:30.904897Z","last_seen":"2026-09-14T20:09:16.918897Z","times_seen":18,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:46.608Z","timestamp":1789416526608,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:46 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:56.691Z","timestamp":1789416536691,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 194\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":194,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":12033,\"ts\":1789416536690}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:56 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:01.294Z","timestamp":1789416541294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:01 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:09:10.299Z","timestamp":1789416550299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:09:10 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/gauth-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.206Z","timestamp":1789416524206,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/gauth-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:02:18 GMT\r\nETag: \"c73-658d0d0b89642-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1116\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3187,"size_decoded":1536,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c2d673aaef4bbe6be92ecd77cdedf2e1","sha1":"9df6116ee08b76359d04cc56da932e1b31cf0f1f","sha256":"b4156c5c0e6e7bcb3ef914cc7340640af5ba9259b15fb4ae6d2ae173f3a57766","sha512":"35b3c36205b8d0eb02231094c1a52724cd2146b7736bcde9fd0d351c7f37643a7e1e459f1d01ff420dc4fef09470dc758bc91b7a1a00e96ae564a161c3c35110","ssdeep":"","tlshash":"c86131a6b1a15db1457b1bb793eb83c67278400ba40ae4463d6c13859fe9c508375bc9","first_seen":"2026-09-13T00:47:22.587283Z","last_seen":"2026-09-14T20:09:16.920009Z","times_seen":16,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:54.082Z","timestamp":1789416534082,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:54 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:59.293Z","timestamp":1789416539293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:59 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/pw-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.201Z","timestamp":1789416524201,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/pw-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:02:30 GMT\r\nETag: \"5e0-658d0d16b8f63-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 701\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1504,"size_decoded":1120,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"eeea57035ae8f0d19cd1ac5252686980","sha1":"08bdd6aa8d1e93b6da1279940f5f7428aae0d381","sha256":"f21100d61c95c30f0c3e614be95b5daeb9b6a6719d0243e6bb95912f97886364","sha512":"369e8cb18df6e1f0b8cc9005675bfd0e258364f76b9e24fb4e8b9890d6edd1bc96c71dbf1384b2e0607dbdf92940244738df420e0147ee826df76d6c8259c11c","ssdeep":"","tlshash":"3e313367f4932ab09ab7a67f57ab81493175400b240bc2103e1c975c7ffed1a8276bc2","first_seen":"2026-09-13T00:47:22.593012Z","last_seen":"2026-09-14T20:09:16.920716Z","times_seen":16,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:45.580Z","timestamp":1789416525580,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:45 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:49.811Z","timestamp":1789416529811,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:49 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:52.692Z","timestamp":1789416532692,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nContent-Type: application/json\r\nContent-Length: 193\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":193,"data":"{\"action\":\"ping\",\"page\":\"password\",\"url\":\"/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\",\"referrer_host\":\"\",\"time_on_page_ms\":8032,\"ts\":1789416532689}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:52 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-14T20:09:16.902552Z","times_seen":18,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:56.292Z","timestamp":1789416536292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:56 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/jq.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.194Z","timestamp":1789416524194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/jq.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"4472c-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":280364,"size_decoded":83705,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-15T04:03:07.416539Z","times_seen":2595,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":59,"receive":86,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/py.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.198Z","timestamp":1789416524198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/py.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"57ca-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4457\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22474,"size_decoded":4879,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (448)","md5":"179c2f04aff2d23f8cc3085318e071f3","sha1":"c92220130d70ffe02fe97fdcdb570a478a6e3e37","sha256":"4532984c494e94d7e4e1b66a83ba92f6696a0be16b76c40fe4fd60f631dc38a3","sha512":"6b860722b9c3833832360c783715c913d0affc0b9a5566f79aa26bc9c298fe852befe6789ac4a1a35ebaf3f623147cf7124a0ceb3f778ba05600dd8570b6e848","ssdeep":"384:AH24Y62HPCIzNXI6z7zByMnIEoipedWKRXzG:k3Y62HPw6H0EoiprQXzG","tlshash":"baa2cd8cfaf361e08227b13d47df95466634c993080ced657c4c5a606f12eac56f9be8","first_seen":"2025-01-13T22:55:36.921043Z","last_seen":"2026-09-14T20:09:16.921988Z","times_seen":55,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":43,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/activity-tracker.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.200Z","timestamp":1789416524200,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/activity-tracker.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Mon, 10 Aug 2026 20:11:49 GMT\r\nETag: \"19ac-658b6f6d96b40-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2265\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6572,"size_decoded":2687,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0831c2d1254e3ee5d3a03d115855de0a","sha1":"123a26583b1d3c43139b877f2dd17d1be76be3eb","sha256":"6a47696eaba6f35a08efdcd4a03d6e5817968f39480a780ceb1eb544caa8e465","sha512":"2a9302bc3a0adb40dfd54d7780413f78b6808f595b44cd61fcb265ab41fab9f668959e03c708936c88d252b105e129b1fcaf6aa7686418e28ad26a4dc6b306f4","ssdeep":"96:Aeq1AhyxjIBMxQ8MT7e1HH5+HXOqbpyDwr5Hk2nXwuJ6AGLwsxOT0b:vq1AhyxwME3eNkXbp/nhJ3QwhG","tlshash":"2cd1849aa8e321b1b977307e47ef7101393b40471406c950be5daa049fb8e6c02b6fde","first_seen":"2026-08-11T22:06:30.899673Z","last_seen":"2026-09-14T20:09:16.922455Z","times_seen":18,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/fonts/roboto-regular.woff2","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:44.607Z","timestamp":1789416524607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /fonts/roboto-regular.woff2 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 14 Sep 2026 20:08:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 279\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":279,"size_decoded":572,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c90c71c23195a6cfd5de71a1fce7d1da","sha1":"017a7b729a403e7938c2d54ec00b7b427a1fef37","sha256":"e0341a0ef8a0beddf7db2edbd570b7195d1ef4f4c20ff087f0e25eaf123e9feb","sha512":"e304ab549e7e61109df9cf003c6d1215e58fe08e24165135979810b6eddc469942ffbb772ea3a3c0f8ba1a1b7d57cf5cb42b9aec5119313937fa68f7efbfed88","ssdeep":"","tlshash":"52d02b9e5043639b4c12195039c115c2268e23f6b43a86e82dc7d487529863ecddaa8d","first_seen":"2026-09-13T07:50:33.095644Z","last_seen":"2026-09-14T20:09:16.911266Z","times_seen":12,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632","date":"2026-09-14T20:08:50.904Z","timestamp":1789416530904,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=password.php\u0026loading=0\u0026fingerprint=9f9f2703-d807-a186-1ff5-80021c89d022\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/password.php?SessionID=a364a64643484fa17f50c946959503e6baf2371bd8c0c26524a7d8312ac79632\r\nCookie: PHPSESSID=fl61t9vcj5kska6a295pt75uqb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 14 Sep 2026 20:08:50 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 12\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":402,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"01e5c1d8a92dfd2745e7c88c51bcc9a6","sha1":"fd3c1d232c1e6a35c321959c1bbe6ba428082f99","sha256":"c88f6613a5b9bbcd52b674ad4ca4ef752cbbdf772b8ca9fd53f65bbdbf8b2cc4","sha512":"21653a5ac64fd68485e763da1552192012f0386a00e4ea48b2b04433db1698081e6b5b70ac6780226f19ed0675b3747eeed6ed1effb39784b61b7dc815e60095","ssdeep":"","tlshash":"0d60000c00000c030f00cc0000030000300cc003000300000300003c3333f0f00000c3","first_seen":"2026-09-13T13:02:43.397996Z","last_seen":"2026-09-14T20:09:16.900949Z","times_seen":10,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"iwuaawdjdwja.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}}]}