{"report_id":"c5fd7548-ae6b-40d8-ab90-0c27c4a3f8d8","version":6,"status":"done","tags":[],"date":"2026-05-08T17:04:20Z","url":{"schema":"https","addr":"burdayzsendegelkatl89.click/","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":0,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login_up.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"title":"Axxel Host Services","dom":{"size":104686,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54570)","md5":"05b7eaf6722ca89125aabe309a952e43","sha1":"c3516ddd797652d7072b837f28609d302d8bce51","sha256":"b79c3e9f62db5904f09ece19ae03258c85990fb08fa7eedf972f6926cc59221d","sha512":"65b8f9afcd570b29af51285edb9e090f90ed071588df4be4730366f26cec85c59def302a2747902533cfebc2474818dfd47f4e4e5e0a89f3eb972b71a694e636","ssdeep":"1536:wcEI+FDlIAqepgAKe8pBAXA2ADihi20BlBfDvPYw5wgEfMtVDFKep:hEI+FDlI7XQ1vcrDvPYw5wNqDKG","tlshash":"94a30a456c6d3e3f539a23e7fca3094df8fe4341a1a024056aee952717de78ac02752e","dom_hash":"domhashb107caad2ba1de1f54c797f96b74c526","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":0,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T17:04:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"burdayzsendegelkatl89.click","ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-05-06","domain_rank":0,"first_seen":"2026-05-08T17:04:25.583358Z","last_seen":"2026-05-08T17:04:25.583358Z","alert_count":84,"request_count":21,"received_data":6924253,"sent_data":10478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login_up.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"189463c45b3fb380cb4286f8ac49a72f","sha1":"0b6e21ced3a9b3dd40dd9ef02aa406a2e8baabce","sha256":"9d68adf6636bd3c88239942ce5dbc815943c649a91768b66ce1e99b32fd58d05","sha512":"6aa277503ac7e1bec1ba579fa69a48839bfbfcfe273b2e97907e80959b21bc8c92f3f537f6c4b7dc433e924095ee933130e17fa2e962b1cdf85cc31a33a0fb33","ssdeep":"","tlshash":"54d022090da80012affeb18cef1362248cd3dbf2400b8841f2dd72996a224768348462","size":196,"data":"","first_seen":"2026-04-23T22:03:22.594877Z","last_seen":"2026-05-20T02:48:51.775077Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login_up.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba9671892ee40ef730a9de509f739aa","sha1":"fb9d10e170d9e076a15dafcc6f6c72c7e6dea4e9","sha256":"89e0312bdb2d175a6b1fe8e30843f86a88f45354029b304c48baa69a776df696","sha512":"90c16df095fd6dfb29d4b592e9ac8e5731fd3c76d70aaa75d2f22d4246e15f8d2871c83d0db7c6ffa110d094bb7cebbced39bf6b6333ae38e8ad723f133281f0","ssdeep":"","tlshash":"f990021428665155d485402115467411a59639ae54172e61de145765178609142685e4","size":51,"data":"","first_seen":"2023-03-08T15:21:27Z","last_seen":"2026-07-18T09:57:56.233022Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/vendors.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1214bea54553c43e77529c0555029336","sha1":"78f650975a2f8ba99ebef65939aef919fc162ba2","sha256":"3d7eab87a52b34706dd8649304f8d3f66592347b57621e6cc05d4770f193652c","sha512":"390acae7aa5b278af53ff48562b1b90a38bd393e61ce619fcfa8faed7a9650ad96928bbcc63aa6c80be537655df4265802b11681e6c389d858a66666e7e06c44","ssdeep":"49152:FPmtSFJVLJsWD0Xlyb70gXwVfNmlhP0PxNKRjT0buzpX4qYRSo+Jcm19JOAM18vN:tBV+WnrZY41OAh5Iq5","tlshash":"74f53ac971e1b07543e361a9807f0106f3391969644dc4a4f678d8ea6cf9c8ea27bf39","size":3522333,"data":"","first_seen":"2026-04-04T10:05:22.784084Z","last_seen":"2026-07-19T17:31:20.930934Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/externals/prototype.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","size":96954,"data":"","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-07-23T22:37:28.686918Z","times_seen":1058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/modules/letsencrypt/global.js?1778222651","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","size":728,"data":"","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-07-23T16:17:30.300256Z","times_seen":2021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login_up.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"409490dc74067b3b265ea37e98ac01e8","sha1":"696ec379a3e50d9ce85b332f1cd76b4edfc6859c","sha256":"293cd45fec615aa63b5325fd000dfac061f49d0c4bb5c4e4b9e02ab5844a7185","sha512":"31d9898059a233fddf1ad35e253532a3fd26f8882cd1b3de5ebd106eefc895b4532546ff23a7ba681386b414cf9325821bee0d512a55c72016a3d6a657403af8","ssdeep":"768:NKDkl0igj0BkSCMBPHrnAwPYw5wHAOlfWhaucbnvYJ4ajJLBfDGfQ/yD:Nihi20BlBfDvPYw5wgEfMtVDFKD","tlshash":"30930b456c6d3e3e579a23ebfce3048dbcbe4341a0a0640569ea9533179e78fc12752e","size":95525,"data":"","first_seen":"2026-05-04T13:11:18.381433Z","last_seen":"2026-05-19T20:04:30.050639Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/externals/require.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e45cf5f857c9c3906e717d54d5c55e3","sha1":"fb62c16d3bfe5c380a00965c9ca28bc81f13bd16","sha256":"870ffd19294292f2390606f671ddee5aa480ac13c3088957918c65179cca94e9","sha512":"8e0e0d2491302cc6a15d4cd6ea9ec6a9af3e8d08f3955336753da5d1b4b023837605781b274108afc98ec9dec5dec08e14aad03791dcf591c97d6e05c73b2044","ssdeep":"384:AvAC1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:OfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"2082eaee3ae6f903b26222f4506f504e6377dd53140cc154f619e8f5acb8568a6a3e3c","size":17713,"data":"","first_seen":"2026-01-16T02:31:31.967183Z","last_seen":"2026-07-23T22:37:28.704143Z","times_seen":685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/modules/notifier/global.js?1776697938","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","size":18383,"data":"","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-19T17:31:20.926395Z","times_seen":1231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/main.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7465673d4c77ab2715ade51b81d843f","sha1":"6fb022141739f06f3ff72b78b4a4a171cde1b8c7","sha256":"ce210b2a4af51ac95904eeabd9902f3c045f206d76e7f33ab01edf86af91d249","sha512":"9a25e17b4da762ecafc0395f2b84bab437acc380e7a18ccb689d222fa61dfae156d8b936383e40828a11ba6a2787d81c663c829b588c894730f1f3e1325af912","ssdeep":"6144:jcbje+nGErw8W2oAGA429kBBkrIBotK5KGRJP4hZBRYouTCuWp3pdc:jcba+vwzm42zIKtQKGRJP4hWouTCucTc","tlshash":"b335a5ab304476bb0debc153986b794530f17276348a40987a3ca9de9b75d482d23f3b","size":1140810,"data":"","first_seen":"2026-04-11T05:58:35.87101Z","last_seen":"2026-07-19T17:31:20.932418Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/plesk-ui-library.min.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f2233f9090f4a2646bf8573e0d2ce7","sha1":"2752a5aeb8909351461d3302e69676e788e9c6c0","sha256":"dcd6acdc4e8369e3d4bb6847140628532ab5fe4c31cddf3d7d8d9b73c1728ad1","sha512":"6d7ef999c8a20912f077a37281480c16bdc10a0d2fe2c87637cd86afd4633e5c2c42397919e9ba59394efd67cecff4d3c4872a7ce0e677b52de4f8d92ac27499","ssdeep":"12288:XSCM4mMqDBljvmIBPC1k/hONFzexFvXrsidIJWG:XSCM4uPMjfexdXxCWG","tlshash":"42e45d9070c1f4e916f744d6406f5409b2391d2de40e5ca0bab8eccd29ba85a717bfbe","size":674043,"data":"","first_seen":"2026-04-04T10:05:22.78232Z","last_seen":"2026-07-19T17:31:20.924477Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/images/logos/AIWGeUYDH-U.jpeg","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:59.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /images/logos/AIWGeUYDH-U.jpeg HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 81582\r\nlast-modified: Mon, 20 Apr 2026 15:30:59 GMT\r\netag: \"69e646b3-13eae\"\r\ncontent-security-policy: default-src 'none'; form-action 'none'; frame-ancestors 'none'; sandbox\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81582,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x640, components 3","md5":"fede1aa426d8c5c3604e5bbf24979350","sha1":"d740e5160f63e80047fde04f2eb23c48cc6a786f","sha256":"2c506ea20242c863a88b6ae81720d1579747f8131576eacd0327d920d31a7787","sha512":"60d29d36a1b206ee236a65bbf11962e418cd1952bc445d2aeb12e517e6b97dd95a1b3b9987b31046f45ad8e43658a233d93a07fcc2490c26d5f779f72cbbc2a1","ssdeep":"1536:RuspCIsyzEco/N/at+vO57g8F+WgrHC9FcCrSHOO2e7uDcI:RuGrzlo5XpHC9F7+Hwe7uDcI","tlshash":"b283120bbc45e4149858528476ccb30e49b6d7ee0c93b3cde67eee64e99276e4d83e01","first_seen":"2026-05-04T13:11:18.372003Z","last_seen":"2026-05-19T20:04:30.038283Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T17:03:57.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Fri, 08 May 2026 17:03:57 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nlocation: https://burdayzsendegelkatl89.click:443/login.php\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98032,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":90,"dns":1,"connect":40,"send":0,"wait":55,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login_up.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T17:03:57.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /login_up.php HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Fri, 08 May 2026 17:03:57 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98032,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60775)","md5":"67b128ad8b430e8656ca980cf171ff44","sha1":"e09039da3cda66a0a5b29e48ddeadf3370d089c6","sha256":"364f55fb71a5e99d5393ae7462de39495fdeb1aacb45c3de401813844792a417","sha512":"57a93698c6fe60ebaa92128cc987ed8c66b34d0b63792f3e5cc77aca2ba93377b7864f10c8c1cda570eb3c9fc84a37672581f9b7b3fee956e01a07245ab10c80","ssdeep":"1536:wEI+FDlvihi20BlBfDvPYw5wgEfMtVDFKy:wEI+FDlWcrDvPYw5wNqDKy","tlshash":"e5a30a452c6d3e3e579a23ebfce3048dbcbe4341a0a0640569ee9537179e78ec12752e","first_seen":"2026-05-08T17:04:47.165227Z","last_seen":"2026-05-08T17:04:47.165227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/modules/letsencrypt/global.css?1778222651","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /modules/letsencrypt/global.css?1778222651 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 06:44:11 GMT\r\netag: W/\"69fd863b-2a4\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":676,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"50186bab48df0fb765c5e62893fcf211","sha1":"5dafe8f3b22fbb0776758d7ab6c81b47c68d119a","sha256":"f1b7502665bd7cb890a9d0d3f7d0aa377b7adfbb03f9f8101a2aca3cfa3532fc","sha512":"c7a8cf632c28a059ea865f67075e3559bce1a459a97f1529e7a5d67da03c82a65c035eaf32f819f0463702c62fab6d0fb90bc5eb1bc91fe126be185756e4b9de","ssdeep":"","tlshash":"dc019e62d7672cce7a1590691f64c742631c681fc015d72dfad8f65c4f8b054fa32762","first_seen":"2023-04-06T01:25:59Z","last_seen":"2026-07-23T22:37:28.686111Z","times_seen":2312,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/externals/prototype.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /cp/javascript/externals/prototype.js?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-17aba\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60866)","md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-07-23T22:37:28.686918Z","times_seen":1058,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/plesk-ui-library.min.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.min.js?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-a48fb\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":674043,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35835)","md5":"e8f2233f9090f4a2646bf8573e0d2ce7","sha1":"2752a5aeb8909351461d3302e69676e788e9c6c0","sha256":"dcd6acdc4e8369e3d4bb6847140628532ab5fe4c31cddf3d7d8d9b73c1728ad1","sha512":"6d7ef999c8a20912f077a37281480c16bdc10a0d2fe2c87637cd86afd4633e5c2c42397919e9ba59394efd67cecff4d3c4872a7ce0e677b52de4f8d92ac27499","ssdeep":"12288:XSCM4mMqDBljvmIBPC1k/hONFzexFvXrsidIJWG:XSCM4uPMjfexdXxCWG","tlshash":"42e45d9070c1f4e916f744d6406f5409b2391d2de40e5ca0bab8eccd29ba85a717bfbe","first_seen":"2026-04-04T10:05:22.78232Z","last_seen":"2026-07-19T17:31:20.924477Z","times_seen":185,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/externals/require.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /cp/javascript/externals/require.js?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-4531\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17713,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17511)","md5":"9e45cf5f857c9c3906e717d54d5c55e3","sha1":"fb62c16d3bfe5c380a00965c9ca28bc81f13bd16","sha256":"870ffd19294292f2390606f671ddee5aa480ac13c3088957918c65179cca94e9","sha512":"8e0e0d2491302cc6a15d4cd6ea9ec6a9af3e8d08f3955336753da5d1b4b023837605781b274108afc98ec9dec5dec08e14aad03791dcf591c97d6e05c73b2044","ssdeep":"384:AvAC1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:OfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"2082eaee3ae6f903b26222f4506f504e6377dd53140cc154f619e8f5acb8568a6a3e3c","first_seen":"2026-01-16T02:31:31.967183Z","last_seen":"2026-07-23T22:37:28.704143Z","times_seen":685,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/modules/notifier/global.js?1776697938","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /modules/notifier/global.js?1776697938 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Apr 2026 15:12:18 GMT\r\netag: W/\"69e64252-47cf\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18319)","md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-19T17:31:20.926395Z","times_seen":1231,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:59.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/ui-library/plesk-ui-library.css?1776354875\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61548\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: \"69e1063b-f06c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61548, version 1.0","md5":"e9681ca3d29d814a5621d4764dd1a11e","sha1":"bbda68459fc0531b915bdf9e524ecc8f782db0aa","sha256":"51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456","sha512":"f03e8536b40002c4aceb759f4e3cce90277491e4ed1b0d9c3b061d36efe8328545765e2d391a22bdd1e1d3d1e94e50ad4b18f65339c6ee0d22c02316869d808c","ssdeep":"768:/h88uQaIKMZe9H1M8KzcxRsmUYwKDSJIVeOFd+h63Lm18JXdHEAfeckzRA7Hi8:/hFSFMU9YImWvKQ2ikabi8","tlshash":"a753f1b07b32e55bfec639739a6d6311d2135c6e8b0705f642b8a050263f12babc459b","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-07-23T22:37:28.70578Z","times_seen":3515,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":69,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T17:03:56.060Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":126,"dns":0,"connect":25,"send":0,"wait":0,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/images/logos/AIWGeUYDH-U.jpeg","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:59.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /images/logos/AIWGeUYDH-U.jpeg HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/images/symbols.svg?c93dbf4e8547363db109","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:59.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /ui-library/images/symbols.svg?c93dbf4e8547363db109 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 291639\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: \"69e1063b-47337\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291639,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"499cc33c42abfb5485666b7d4016fbb1","sha1":"8bc6aded0acf1cdbe4cd1a94189e852edb06a25e","sha256":"e8fd13692a15dc7b03cd7a0a926fdaba4b276fcabb2b28ff04efb587542960f8","sha512":"189f779777fadfe7331b36393d9dd2fb638e76bb22b851e48dc68f4e9f134e1d4d020c43fcfec628c879a2e02a056817526190691948a5d9894cf73e71408b2e","ssdeep":"3072:BGHcIZBsSfBUp1pIcNceSHD0jgULLLm7I7rgiCzAwpoQGF4sUrUSicuca8YzgcL4:BGDfBh9aCztq7/YaU","tlshash":"87542eb907bcd2dc2547c63aeb3b55e0571ea4bfb1b6c0a0396f8b704b53061d6876a0","first_seen":"2024-05-28T06:49:03Z","last_seen":"2026-07-19T19:32:49.46327Z","times_seen":1081,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/theme/css/main.css?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /cp/theme/css/main.css?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-5ffdf\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a3b29e350222ea7350b99d907dedbda","sha1":"e3bcda7e7327d50cf63aea1fd704983da43b55e5","sha256":"2dcb5b258d7b0fdb4ca94a4108dc9c9518843db17f870e9edb6067fb278534ce","sha512":"344ac414e9b26300b37c629b58fa4674b97b9b770be56578e1110615a7bb781e7289c93e66d1b2d97ea5e1c9b4d3ae53f8b282cc6eb1309487674536475129fe","ssdeep":"6144:S6iSzdcO33ag+Y3iHi8RDDPu88xag88Sb/9:ZcOviCmh9","tlshash":"99843c50f19935bd31af861bf6e12645a31e9461e2535efef46be2ec82cd0c41633e22","first_seen":"2026-04-04T10:05:22.769635Z","last_seen":"2026-07-19T17:31:20.929047Z","times_seen":174,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/vendors.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /cp/javascript/vendors.js?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-35bf1d\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3522333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"42d73ff3cb751060d791c8573bdcfb7c","sha1":"f8a8bf0e06c6e8294bd433ebf3448e274fee77d0","sha256":"fce5c9c82d47dfabe0ecb0a26e224dd47e7c4bbbec50cbf61444f2c45e2d559c","sha512":"88417e0dc454ea863cdc0ee2909e559a96049d9fc13d8085e118105e35e502cfeb0d6cea1866f4d45755eb8d80761f865d8a4044de8bc2fe796404263658b502","ssdeep":"24576:FhkQWyytSFJVlC7gMZYnsWD0Xlyb70gXwVfNmlhg:FPmtSFJVLJsWD0Xlyb70gXwVfNmlhg","tlshash":"f42519c53292b47643d752e5c07f0106e3361959340d8478bbacd8df68aac4ea23bfb9","first_seen":"2026-04-03T20:42:57.107854Z","last_seen":"2026-07-19T17:31:20.915676Z","times_seen":183,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/cp/javascript/main.js?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /cp/javascript/main.js?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-11684a\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1140810,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"603448f360d2a3965496615d2485bf4f","sha1":"6595b6db6559040196cabfbbd2575984f200aabe","sha256":"e6f5e0dae1fb4144ab6cea455884c065a3dd810cefb11b4bce3f5d45a6ad791d","sha512":"2b44933f1134d281e2441c6e827cdd40947afbb0627dc9c99ebee84a23ecbdc2a92eca4c246888bf018682c2eeee9183fd2897da8eebbe9c98c50c81d49d0cec","ssdeep":"6144:jcbje+nGErw8W2oAGA429kBBkrIBotK5KGRJP4hZBRYoum:jcba+vwzm42zIKtQKGRJP4hWoum","tlshash":"5e2584ab304476bb0eabd163886b754530f17236349a40987a3ca5dedb74d482d63f3b","first_seen":"2026-04-03T20:42:57.113866Z","last_seen":"2026-07-19T17:31:20.916267Z","times_seen":182,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/modules/letsencrypt/global.js?1778222651","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /modules/letsencrypt/global.js?1778222651 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 06:44:11 GMT\r\netag: W/\"69fd863b-2d8\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-07-23T16:17:30.300256Z","times_seen":2021,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/images/apple-touch-icon.png?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /images/apple-touch-icon.png?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 4528\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: \"69e1063b-11b0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ebbd61fb584cc8ae62ffa726070c952f","sha1":"7aefbffc866e859207b23f736faeac97f51414e6","sha256":"b23ec702f16e22329aa8d8a74cede38c886e609acd467517a004439cbbb1da1c","sha512":"f25e44b2827d8131d7264ac6d89c1da95b452111d92f8681b001145283cd505b7fc72f637b72d94a550247284f15d9334f4e4b8802e795378c8c6483ae68fb73","ssdeep":"96:LSlwpX/RP3oYm4HoZtygi8U/q8fDdOY0JkLTRR6U5/3:LSlwJ/RP3oYmJW7t1Dd0wTz6Uh","tlshash":"fe919e6c5303d6786bf82488136e65e5d24a76627c5397b60ea41b1e2cdc38afbc5cf0","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-07-23T22:37:28.692297Z","times_seen":2627,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:59.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/ui-library/plesk-ui-library.css?1776354875\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59600\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: \"69e1063b-e8d0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59600, version 1.0","md5":"e78dce533ecee30c5efd812bb23c248d","sha1":"87d988c2f0343952ccded7c17b000e33db6f3d15","sha256":"03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e","sha512":"84ef89585b92b235ce6d0288f2a52cd894a074bf23c29e06927ad7e3a5316bd97069b69a5246acd1d9eb6beb42b85866a1109d9591300746f11c515d959d82b8","ssdeep":"1536:OOgE9AeA+6fIVtMLSaRUArskS2m21Cgbv+M7+Do/N1:AE5A+6ksSaRPAHw0ov","tlshash":"4543f1155519c890cd26783c89b9aee180b06eb4c2480ef76f9c3685fee1767f6137a4","first_seen":"2023-04-06T18:57:36Z","last_seen":"2026-07-23T16:17:30.29553Z","times_seen":4732,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/login.php","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T17:03:57.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Fri, 08 May 2026 17:03:57 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nlocation: https://burdayzsendegelkatl89.click:443/login_up.php\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98032,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T22:50:57.108687Z","times_seen":17486805,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/ui-library/plesk-ui-library.css?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.css?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 15:54:35 GMT\r\netag: W/\"69e1063b-36cb1\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224433,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ff036d7f54499a5876089e0f0fd06327","sha1":"d871dad539c4bfb5eb967496f26f8e25887c1ab5","sha256":"4cc6e2fb5515e998accd9388a77d8d82f6695e5f9eae9b940fd2a116b5148cb6","sha512":"c223af35a9b0a922319e816189f88772ce5f4e9d1da6b7fe4133663987b9dab162058d96554ab76100ea46cf380080858742d38a462f66c64a98710467bf507f","ssdeep":"1536:q4m2X3u1uRu6smjL10yfeVdaxGpGoGWGqW40K3NFpb/rQ9+:3p0yfeVda59+","tlshash":"ee2462d2e540353a3e0fb7bd71b1a95c62185a81ce52dbdef098e31c82c16d3c9e6d1a","first_seen":"2026-04-03T20:42:57.114807Z","last_seen":"2026-07-19T17:31:20.919131Z","times_seen":198,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"burdayzsendegelkatl89.click/images/favicon.svg?1776354875","fqdn":"burdayzsendegelkatl89.click","domain":"burdayzsendegelkatl89.click","tld":"click"},"ip":{"addr":"31.56.209.11","port":443,"asn":25369,"as":"Hydra Communications Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://burdayzsendegelkatl89.click/login_up.php","date":"2026-05-08T17:03:58.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plesk.axxel1.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 05:58:16 GMT","end":"Sun, 26 Jul 2026 05:58:15 GMT"},"fingerprint":{"sha1":"6C:01:69:65:6D:AB:B3:A3:AB:A3:C7:31:26:53:7A:2F:16:5B:5B:65","sha256":"2E:EC:73:29:77:E4:57:78:C8:60:0E:10:22:06:16:89:D3:12:5D:95:98:7A:3B:C5:5B:9D:4F:59:A3:8A:49:C1"}}},"request":{"raw":"GET /images/favicon.svg?1776354875 HTTP/1.1\r\nHost: burdayzsendegelkatl89.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://burdayzsendegelkatl89.click/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 08 May 2026 17:03:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 36406\r\nlast-modified: Mon, 20 Apr 2026 15:30:59 GMT\r\netag: \"69e646b3-8e36\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"807ecea68619f97536423e1d2a73a710","sha1":"1582b0091e05442a4c905d5f76ad75c450d96c2c","sha256":"b49e6e4a85abf799d47db49928b513697b9edf119ff1720c7cef1d645c7d08dc","sha512":"705db870bca08028fa6eb3af45cfccd503bb6b02abb026745f00f23e2dc18aa8db76f348de1f172fef888c54bc2a4fbfbb5c74e13a6da4ae64e92026eedf82a3","ssdeep":"768:MoixS4vmozqd6v8xCc/Gir38WXg3XulXs7B9S3Rng8L23xriw3F7qQj3K2ZB19+R:6xSEljUBeXCj8qMxCP","tlshash":"c1f255e5ba7420f8e56e5391cdf6186e172f62fe3b0284595b1d2ab08c3359c968bcc1","first_seen":"2026-05-04T13:11:18.369142Z","last_seen":"2026-05-19T20:04:30.035412Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"burdayzsendegelkatl89.click","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"burdayzsendegelkatl89.click","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}