WEBSITE ANALYSIS REPORT

https://short.engineerdanyal.com/xBtKRAJ

12 Oct 2026 · 14:34:37.000 UTCpublic

Report tags: malicious loader anti_analysis
Submit tags

Request review

Malicious detection

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:34:01.290 GET 302 document 0 B 476 ms 1 alerts

14:34:01.779 GET 200 document 7.4 KB 686 ms 2 alerts

14:34:07.923 GET 307 document 0 B 816 ms —

14:34:08.746 GET 302 document 0 B 105 ms 1 alerts

14:34:08.856 GET 429 document 33.2 KB 61 ms —

14:34:09.085 GET 403 img 33.2 KB 11 ms —

14:34:09.246 GET 200 script 40.3 KB 12 ms —

14:34:09.416 GET 200 fetch 483.8 KB 29 ms —

14:34:19.985 POST 204 fetch 0 B 0 ms —

14:34:20.016 GET 302 document 0 B 11 ms —

14:34:20.111 GET 302 document 0 B 105 ms 1 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://short.engineerdanyal.com/LY7CgEq

IP / ASN

64.177.119.157

Unknown

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 18:37:15.025 UTC
Times seen: 19190815

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: short.engineerdanyal.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 55:E2:F7:34:42:FA:0A:F9:D4:51:85:02:BD:DE:B5:50:2A:CF:09:80
Valid from: Wed, 30 Sep 2026 19:06:19 GMT
Valid until: Tue, 29 Dec 2026 19:06:18 GMT

Technology fingerprints

Nginx:1.18.0 (Web servers, Reverse proxies)
Ubuntu (Operating systems)
Express (Web frameworks, Web servers)
Node.js (Programming languages)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /LY7CgEq HTTP/1.1
Host: short.engineerdanyal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://nsuezkappas.com/
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 302 Found
Server: nginx/1.18.0 (Ubuntu)
Date: Mon, 12 Oct 2026 14:34:20 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 68
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: *
Location: https://wkcvkwijjk.kidscommercials.com/
Vary: Accept

14:34:20.222 GET 200 document 3.8 KB 777 ms 1 alerts

14:34:21.470 GET 302 script 0 B 26 ms —

14:34:21.484 GET 404 img 0 B 614 ms 1 alerts

14:34:21.512 GET 200 script 84.7 KB 12 ms —

14:34:21.601 GET 200 subdocument 261.6 KB 26 ms —

14:34:22.064 POST 200 xhr 767.6 KB 252 ms —

14:34:23.777 GET 200 img 3.1 KB 6 ms —

14:34:24.070 POST 200 xhr 117.7 KB 48 ms —

14:34:28.619 POST 200 xhr 2.3 KB 37 ms —

https://short.engineerdanyal.com/xBtKRAJ

Domain graph

Hostnames

Connections