{"report_id":"d8e8a773-16fc-4ee9-b83f-4ec43011c3ff","version":6,"status":"done","tags":[],"date":"2026-03-14T12:46:33Z","url":{"schema":"http","addr":"qnbpromosyonburda.cfd","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"title":"DenizBank İnternet Bankacılığı","dom":{"size":267323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54528)","md5":"e44b8b3d24316918d1a33f3338eee1eb","sha1":"988e87961aba48b81f37d1c6733281774228b748","sha256":"8992e2228506399a721020cf18a2088df29a1b738ef4f0f5e46953ccfe09aa20","sha512":"2a57c08bc7365515585a559eb47b7df3127cd1db7212da8b0a158832c9150d518500ae54598153f86a3b54b9fb811583ddbf1d8c5247c67c487f5e820740c00a","ssdeep":"6144:6ucUP29e9LPvD/Oipq+1cJQgfk2kfuCeyzK:7cU+9e9TvrfpqzJQOIf1zK","tlshash":"5244f17171ae52e7a3db46eaf12e46341cf2c52bcd8ce1cd349c641597e2a14ec89eb0","dom_hash":"domhash75489d6e3a1a6655222f8882e395e459","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"qnbpromosyonburda.cfd","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T12:46:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"qnbpromosyonburda.cfd","ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-03-14T12:46:34.44134Z","last_seen":"2026-03-14T12:46:34.44134Z","alert_count":108,"request_count":27,"received_data":1497683,"sent_data":13291,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Dynatrace RUM","description":"Dynatrace RUM is a AI powered, full stack, automated real user monutoring platform built by Dynatrace.","website":"https://www.dynatrace.com/platform/real-user-monitoring","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["RUM"]},{"name":"Dynatrace","description":"Dynatrace is a technology company that produces a software intelligence platform based on artificial intelligence to monitor and optimise application performance and development, IT infrastructure, and user experience for businesses and government agencies throughout the world.","website":"https://www.dynatrace.com","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-08T22:22:58.987044Z","alert_count":0,"request_count":1,"received_data":431649,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd089cd9b356dc4e6d15a8aa0743e75e","sha1":"f35e8af3462a09df8a86564517579c7491ef60f0","sha256":"d58dc127db01e4ced58ddcdd013c05878f5383487555f8a7075341f692f0df97","sha512":"002357e86931c8c8d9ae937b32fbef79ddb5da2b6b75a9de6bdd3e4a5cb1b0833b3f2596e11266d8611dc009154f11d954b96e2d222087731c8e6c567a7f504c","ssdeep":"","tlshash":"f0c02b8c210a0cb047fb27008b7ff600b4873314ace06a35484a33444d70e07d744860","size":153,"data":"","first_seen":"2023-03-07T12:38:23Z","last_seen":"2026-05-15T18:36:15.599303Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a77e8e6e01c4cd2199d2d10b07617c0","sha1":"63513f926f72e46425bc5dd3900656483b0a3800","sha256":"585d22302c8518ac5e870e746b80c63e04a4fef04e12e93c59804eb53b801f70","sha512":"13c542eab6a41daa7d72d2b5f35fc38dbcc3cd277f7a49c08063115df5e8ef752d7dd184a792fbbee64f85e84ff2172d8e34c7caea7c5f0b83aed42390f11a6a","ssdeep":"","tlshash":"915165061ca380215a6e364aebbfd328357396531441d405798cce49af64fa7ccbae9a","size":2721,"data":"","first_seen":"2023-03-07T12:07:31Z","last_seen":"2026-05-15T18:36:15.600402Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2408f134be92fa36d0cf0312c277c850","sha1":"89f2147a11096452515a89af7a8e5403fc379473","sha256":"dcc85bf134bc23f1f053d4431bbff83e22e590d67e18daa33abf38dcf33bd711","sha512":"842f7894888eadebee73763683749bc154daf54c70a3832b25083cc9e8d480b6932f919d6a661b75ee0b4929188a99139989fb8d24b4b94012b2d5df0e723abc","ssdeep":"","tlshash":"81117a2ab4500a3e97fb6f5378cf7b9a7633814118494936c4bece8702649c7503eac5","size":924,"data":"","first_seen":"2026-03-14T12:46:40.189856Z","last_seen":"2026-03-14T23:23:41.680191Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JV07ZMRWNH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e9f161a391e698205d973514a619c30","sha1":"6614ef882640a90c2335f7ee845f1b113901b98c","sha256":"386df17be56c0281073077bbba2fe4ccfcc369c1466ec6f3602344e618000c44","sha512":"b2c715720a5489e7d425d9c742ed7289974adb2ddd56376402763a8a89a0a996e1c89eec55d7a151085127f33a1018650a0e448340fa178304c77595bc31ac92","ssdeep":"6144:wT0k+9ZCN708voOE8cvQVsgXBGOYs4xueWpr0HpO9Km:23AZCNglOE894kma","tlshash":"1e941acdb3d670268397f478503f018ba57b6aa2b44cc999f189c8e42d7469a4237f7c","size":431045,"data":"","first_seen":"2026-03-14T12:46:40.186273Z","last_seen":"2026-03-14T13:36:54.981757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/polyfills.e7c27bf15bf48a72de71.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /polyfills.e7c27bf15bf48a72de71.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/js/analytics.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/js/analytics.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/login/bg/autumn.jpg","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/login/bg/autumn.jpg HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"5eaed-62028d16-26f55823150abf18;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 387821\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":387821,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2560x1701, components 3","md5":"90062fd1b816f53d1f7ddddf1b2d15c4","sha1":"a0407ae398c54b47de374b9813c8be17ec82bb40","sha256":"f7278ca494d765eab007679ace9914b237327326d7cd2840660dc8140a8b5542","sha512":"606787c8c6c4e1f41b58aca63a700d09f7d9bc6d12fdbc5eb523fdcc37c6e1aeac6e96c09379522eb4425c2b765937accda723e0dd125795177b3c3f07de33bf","ssdeep":"6144:R0O4V8dy4Vg/fmnnQcw55g0EL4PJy4HPEIfrfQsb2LHtgmi1:RHkEy8nQJ53EL4M4cIfrftb2Lbi1","tlshash":"b984237a3cf8299adfcacbb55d9c4362103393b6a37a07ef1db556112b21b96f058c01","first_seen":"2023-05-04T02:19:34Z","last_seen":"2026-05-15T18:36:15.586792Z","times_seen":98,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-bold-webfont.c04f02eb3292e49d2d4e.woff","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-bold-webfont.c04f02eb3292e49d2d4e.woff HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/scripts.e8b3c78207fa4f6d6f74.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /scripts.e8b3c78207fa4f6d6f74.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-regular-webfont.a66a53e7f788b1ab7e41.woff2 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/favicon.ico","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/ruxitagentjs_ICA27SVfqrux_10221210805073954.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /ruxitagentjs_ICA27SVfqrux_10221210805073954.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/logo-light.svg","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/logo-light.svg HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"2c141-62028d16-5cd205db4a22725c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7076\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":180545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3140e053e7a3dde67e7b2c81b23771d2","sha1":"5d0558f8da94ace88a622c70b8857bde38d7ba12","sha256":"3da913d79fff46cfe4d58d56e141cfcb31865606284507f7a530db69394330fb","sha512":"1b1a21016b9b99d5b58949777b260741fc9f2241ada76cc45482cb45b4f8a3ea32b6a4af53016bb2eb7b72ea3143e22826b366af723b37e383d1f4109eaaf2e5","ssdeep":"768:CvgpvgXvgdvgrvgRvgfvglvgTvg5vgnvgtvg7vgjvgJvg3vg9vgLvgxvg/vgFvgl:RJA3KuhQbJ","tlshash":"fc0457e31b60a25067d3e40eef61a5a4651be1f9d93382c6b2afc74957e3bc8f502d10","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-05-15T18:36:15.598199Z","times_seen":177,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/login/login-footer-logo.svg","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/login/login-footer-logo.svg HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"8bf-62028d16-4cb02f3159c2ca04;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1126\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2239,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0ddebba4f15d5e966e993727605c03d","sha1":"df6ba82ac9022f0309037baa9dbf6fbcfaaca543","sha256":"59c1a112d5d610c1399aa46d5b549c5aad1e4b283aaf785545e818d053f25378","sha512":"81c8fa6a6477529130de72ab6e265aa9ba209e6ce5b4f8440961ab57241cf214604c6da5c6aca8a07a0a4191813c093cbd19b9f81382a2e133e29033863460b3","ssdeep":"","tlshash":"9d4174e10b74a0b890e71f2cef350d95ae8ba8fed7614380b29c642b9b67e459503d58","first_seen":"2023-05-01T10:01:38Z","last_seen":"2026-05-15T18:36:15.583861Z","times_seen":122,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/enbd.png","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/enbd.png HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"ede-62028d16-9a27ecba03194187;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3806\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 72, 8-bit/color RGBA, non-interlaced","md5":"58cf11a4b5f8ebdc29ec2e7b787c8d69","sha1":"cd2686b1f04cfa4afb69b228fd7177d65e907d32","sha256":"1b74331ad061c583ad54561f95596a8481b95d863a431fc4daf3a9ee7d151975","sha512":"799783bae62adfec92e17400a664b4dd4b30efa551c3c81f61daba4b61c9f55da657b74e867c30a961823b509054fa452c98380a41980549824f56893ab9d39b","ssdeep":"","tlshash":"03716cf702df5f9ac2d2c5aaaaf36f300595d67182ed6adc0a124a502f0e2f411b0466","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-05-15T18:36:15.585387Z","times_seen":174,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/runtime.c298608e9647c69cc550.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /runtime.c298608e9647c69cc550.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-bold-webfont.7b013a3110831768093f.woff2","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-bold-webfont.7b013a3110831768093f.woff2 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-regular-webfont.d389759376bc2ac55ee9.woff","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-regular-webfont.d389759376bc2ac55ee9.woff HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/icomoon.0014b4e7989bbfeaaef5.woff?bezj20","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/icomoon.0014b4e7989bbfeaaef5.woff?bezj20 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nCookie: _ga_JV07ZMRWNH=GS2.1.s1773492368$o1$g0$t1773492368$j60$l0$h0; _ga=GA1.1.235000446.1773492368\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /styles.14f38c16c3244b5492af.css HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"9024d-62028d16-44d6065a5963b0af;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 92671\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":590413,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (53193), with CRLF line terminators","md5":"e15084a5fa844a4667363a77dbba388a","sha1":"c2fc998a4874ca1ed1f87bc32562270b3a4711d2","sha256":"0ab27addfe127020ce7b9a6a5e3b57a133915e23edbe0852cff7b511507e56ea","sha512":"001ad88484a157a1e51377c16ea19e5cdd58c6e45bb48858357721435c5a1727bb8811892c598e496475c3edb1095dc14e8b186b217ad57df752edcfb41d8c05","ssdeep":"6144:/RTsyx/lJ/q3SYiLENM6HN26jzBN+ZXhzZ:/RTs8Q9N+ZXhzZ","tlshash":"5ac4e9b2f544302df567c65aa4d0b7a8293a8152e7220ffff51776348bca5db0267a0c","first_seen":"2023-04-08T08:29:01Z","last_seen":"2026-05-15T18:36:15.589578Z","times_seen":42,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/icomoon.a16e09ed69c51903026e.ttf?bezj20","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/icomoon.a16e09ed69c51903026e.ttf?bezj20 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/loading.gif","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/loading.gif HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/gif\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"93d0-62028d16-7df096fc7a201c4d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 37840\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":37840,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 96 x 96","md5":"a5ac552d6a23421d7697f897729a2def","sha1":"836cb1e7a61967b762898a3ce32e64ca7713119c","sha256":"4d54a976b6fa75c73ec219bf5ca96537d46c387c138842fe3d76be0d9e111e0a","sha512":"cd1e1f9c1e6c05baf7ae3d11c909856e392c02773d39c18a480d6689f8de2d5e255d249d348ea6c24ac2d6df581de5187498025a6b378ba87f97f35e19222008","ssdeep":"768:pHxwCT4I3lmUgcEyCO3aUkJxIMSZ9EYTjrBU0XM+9HlgS2lkdshIGhI:pHxhc0lLgcEyCOKUkrHSZ9EYTjrBU0cS","tlshash":"3803e8a3d66c8672eee755741901cf2b8cc4525c40f17bda9af62df0128ab44cbac1e3","first_seen":"2023-05-01T09:44:05Z","last_seen":"2026-05-15T18:36:15.596921Z","times_seen":165,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/main.c01c0c9a76089d1c0f34.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /main.c01c0c9a76089d1c0f34.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/icomoon.6ff42eccb86b1fcbfe3f.woff2?bezj20","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/icomoon.6ff42eccb86b1fcbfe3f.woff2?bezj20 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-semibold-webfont.1045337df148fc781940.woff2","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-semibold-webfont.1045337df148fc781940.woff2 HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/user.png","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"8cf-62028d16-c2250477d6a3814c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2255\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2255,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 27x34, components 3","md5":"cc0a5532279fefa0f24e6c6a91442acc","sha1":"1a16230291c3c234087a39fa0314a71591f171fb","sha256":"97090cea6a2bbb16d13fa490185bc7e25d41935e376d4edfee651c474f466309","sha512":"71f9c681d9fbff845b328a2a1234e87d01f8397409721e2ac28a1fec700b18b286fefbe77ffb7dba58803cd2a6ced79050e7427214977e213ca1d581b5291a04","ssdeep":"","tlshash":"61413c78a32117d0cd33c9feded51def62d95cd13d20a80078c24170c278a495c64b4c","first_seen":"2023-05-04T02:19:33Z","last_seen":"2026-05-15T18:36:15.590691Z","times_seen":75,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/vendor.67eb8a7592425af0ba81.js","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /vendor.67eb8a7592425af0ba81.js HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/assets/opensans-semibold-webfont.ba28aba0329c0fc0e825.woff","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /assets/opensans-semibold-webfont.ba28aba0329c0fc0e825.woff HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/styles.14f38c16c3244b5492af.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 808\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:46:07.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 12:46:07 GMT\r\nx-powered-by: PHP/8.3.30, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Dynatrace RUM","description":"Dynatrace RUM is a AI powered, full stack, automated real user monutoring platform built by Dynatrace.","website":"https://www.dynatrace.com/platform/real-user-monitoring","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["RUM"]},{"name":"Dynatrace","description":"Dynatrace is a technology company that produces a software intelligence platform based on artificial intelligence to monitor and optimise application performance and development, IT infrastructure, and user experience for businesses and government agencies throughout the world.","website":"https://www.dynatrace.com","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["Analytics"]}],"data":{"size":267380,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54477)","md5":"9909aeee415e563902aff37699378d74","sha1":"c0d0b5e2ba72c72999b37272e3564ccdb0085ccf","sha256":"c711dc00eb5fd43374a585110379bad10744dd545cb42a096379914da6f8683d","sha512":"4005b632e221f83c66d8431c445dc419d19bd4ee546326cc52e0441f1ec9166c7c5858c84e09b31745fe5423f63c33605046eee47b34f92e6b4d1170f3f9ff8d","ssdeep":"6144:H8cUP29e9LPvD/Oipq+1cJQgfk2kfuCeyzk:ccU+9e9TvrfpqzJQOIf1zk","tlshash":"b444f17171ae52e7a3cb46eaf12e46341cf2c52bcd8ce1cd349c641597e6a10ec89eb0","first_seen":"2026-03-14T12:46:40.185417Z","last_seen":"2026-03-14T23:23:41.664676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":132,"dns":50,"connect":36,"send":0,"wait":56,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JV07ZMRWNH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.20.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-JV07ZMRWNH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nexpires: Sat, 14 Mar 2026 12:46:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145909\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431045,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"8e9f161a391e698205d973514a619c30","sha1":"6614ef882640a90c2335f7ee845f1b113901b98c","sha256":"386df17be56c0281073077bbba2fe4ccfcc369c1466ec6f3602344e618000c44","sha512":"b2c715720a5489e7d425d9c742ed7289974adb2ddd56376402763a8a89a0a996e1c89eec55d7a151085127f33a1018650a0e448340fa178304c77595bc31ac92","ssdeep":"6144:wT0k+9ZCN708voOE8cvQVsgXBGOYs4xueWpr0HpO9Km:23AZCNglOE894kma","tlshash":"1e941acdb3d670268397f478503f018ba57b6aa2b44cc999f189c8e42d7469a4237f7c","first_seen":"2026-03-14T12:46:40.186273Z","last_seen":"2026-03-14T13:36:54.981757Z","times_seen":2,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":34,"receive":28,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/sifre.png","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /sifre.png HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Mar 2026 12:46:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 08 Feb 2022 15:32:38 GMT\r\netag: \"9c0-62028d16-d6634a2daef1adde;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 2496\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 36x34, components 3","md5":"116f84727996ddda2d71b3c85cf358ac","sha1":"a90ef391e339ddafbe5ae9f1f3d7d8d5cbf4a4e8","sha256":"7ef622314ab427c8beae5b61a48b8e16710531e05406b135c0c5b4e8f1b22e17","sha512":"efe2c0d9eddfee4a0bea8fdbe2e103b2b04f7f6bee3fa1561e2d8722c6f05b3b98fdc0fdfa9475cf495db8bfefb149fcb027575cca549011209574b2b05e77dd","ssdeep":"","tlshash":"43511a175bf2aaa0c8e3c7ba63902687d74b558075d97e05e8310be6c300d42d082d9c","first_seen":"2023-05-04T02:19:33Z","last_seen":"2026-05-15T18:36:15.582152Z","times_seen":75,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"qnbpromosyonburda.cfd/_assets/img/appicon.png","fqdn":"qnbpromosyonburda.cfd","domain":"qnbpromosyonburda.cfd","tld":"cfd"},"ip":{"addr":"64.89.161.43","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://qnbpromosyonburda.cfd/","date":"2026-03-14T12:46:08.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qnbpromosyonburda.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 08:00:21 GMT","end":"Fri, 12 Jun 2026 08:00:20 GMT"},"fingerprint":{"sha1":"AA:C0:D1:8F:51:6C:09:A3:0B:42:B3:17:18:10:B4:6D:6E:6B:8A:EC","sha256":"52:C0:B3:2F:08:9E:A8:BC:12:46:5D:C7:68:B2:86:60:86:E9:8B:97:27:B5:96:E5:08:58:0A:D4:35:FC:C8:7F"}}},"request":{"raw":"GET /_assets/img/appicon.png HTTP/1.1\r\nHost: qnbpromosyonburda.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://qnbpromosyonburda.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Feb 2026 18:30:33 GMT\r\netag: \"328-698ccac9-9d18319d4cee130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 369\r\ndate: Sat, 14 Mar 2026 12:46:08 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-07-23T21:04:08.440574Z","times_seen":38455,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"qnbpromosyonburda.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}