{"report_id":"f3a59469-8a01-4e34-9674-1c3bc0ae7428","version":0,"status":"done","tags":["google"],"date":"2026-09-13T12:46:23Z","url":{"schema":"http","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":0,"asn":205759,"as":"Ghosty Networks LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"title":"Sign in - Google Accounts","dom":{"size":127537,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (494)","md5":"1030760e765cb07fbc92f609f77e575e","sha1":"70cf37255e90b643b723e173ece3ca09d5c0d7c1","sha256":"b082caa6eb0be94eec8f7d7692c7de6ef9ee0ec212f149257307c8895f19657f","sha512":"22d50ad2c1863155cdcf04e81c4d256f9e9a4a43c6cf7860508939bd4b91ca53d7ec4b35b57795ae564348cd897e6acf5294eaf2128e7b890261a46cfa0740b4","ssdeep":"1536:TTk+Vlk+VSk+VcrtuVX3vPMMJrD9hgfPadZHaKOo+wxYwvxLC80cwG+:TBrtuVX3vPMMMo++Ywk8s","tlshash":"edc393de9a73202bac23317a53efc658a778d443e519efa17ddc4205cf88be904a6741","dom_hash":"domhash12e43d4df469ae0915be44c86317145f","first_seen":"2026-09-13T12:46:26.676736Z","last_seen":"2026-09-13T12:46:26.676736Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:46:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"summary":[{"fqdn":"iwuaawdjdwja.com","ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-10","domain_rank":0,"first_seen":"2026-09-13T07:50:29.255248Z","last_seen":"2026-09-13T07:50:29.255248Z","alert_count":114,"request_count":57,"received_data":646546,"sent_data":33183,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/jq.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","size":280364,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-13T13:02:43.404959Z","times_seen":2584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/device-detector.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09e1ecf015837733d349467996e3464f","sha1":"25cd8988056bad199f3907d71b3fb01d744dafd2","sha256":"3e56830ea38e9bfb8e324b1995c60b0f7ae4dce529d9a67dd27a23705888fb8f","sha512":"8e98831b86e06bb41ba863031696530b6e8fddcad46bb021dfaf38070b7ee4d46ae710ed48903ae8ee2bf0e3139d9fcb037034d846958f70b892569b79bdcb27","ssdeep":"768:M9AgbMRdWMxaEKBK/4DKHBu2P6fcuqhU4CTToMrdeUwod8GroNea:MmcEKBog/q21YNH","tlshash":"ad13293fe312b7144396ed99d80740009e365c2aee95b4a5f9d8b640eec68b121bff71","size":42820,"data":"","first_seen":"2026-08-11T22:06:30.895307Z","last_seen":"2026-09-13T13:02:43.401265Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/py.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"179c2f04aff2d23f8cc3085318e071f3","sha1":"c92220130d70ffe02fe97fdcdb570a478a6e3e37","sha256":"4532984c494e94d7e4e1b66a83ba92f6696a0be16b76c40fe4fd60f631dc38a3","sha512":"6b860722b9c3833832360c783715c913d0affc0b9a5566f79aa26bc9c298fe852befe6789ac4a1a35ebaf3f623147cf7124a0ceb3f778ba05600dd8570b6e848","ssdeep":"384:AH24Y62HPCIzNXI6z7zByMnIEoipedWKRXzG:k3Y62HPw6H0EoiprQXzG","tlshash":"baa2cd8cfaf361e08227b13d47df95466634c993080ced657c4c5a606f12eac56f9be8","size":22474,"data":"","first_seen":"2025-01-13T22:55:36.921043Z","last_seen":"2026-09-13T13:02:43.41304Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/code-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1d428384ea064292c3b52f6207f68e","sha1":"ccc860d664cf9adf4af5083e856d2a8ffc71632b","sha256":"1eccdd5b45b15434f48572cc940ffea43bef5c3067c7bab3b79181f57e69eb2f","sha512":"608ce1a5e8b4fe038d817ce571eceda225907f05067b46f964cf9c5d0ad14750cae90f281a3c82aebd7ec1aa3ce1bf5a6b94906e0916c200e26dfb8a1c0162ea","ssdeep":"","tlshash":"38512e18e8e31bb59777b07a837f102a31a0104f2488c952bc5c92601fe1e6431eaaea","size":3039,"data":"","first_seen":"2026-09-13T00:47:22.589534Z","last_seen":"2026-09-13T13:02:43.408264Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/gauth-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2d673aaef4bbe6be92ecd77cdedf2e1","sha1":"9df6116ee08b76359d04cc56da932e1b31cf0f1f","sha256":"b4156c5c0e6e7bcb3ef914cc7340640af5ba9259b15fb4ae6d2ae173f3a57766","sha512":"35b3c36205b8d0eb02231094c1a52724cd2146b7736bcde9fd0d351c7f37643a7e1e459f1d01ff420dc4fef09470dc758bc91b7a1a00e96ae564a161c3c35110","ssdeep":"","tlshash":"c86131a6b1a15db1457b1bb793eb83c67278400ba40ae4463d6c13859fe9c508375bc9","size":3187,"data":"","first_seen":"2026-09-13T00:47:22.587283Z","last_seen":"2026-09-13T13:02:43.402411Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"936e0e9c6e695b38b1114c78648c1d8e","sha1":"ea688f9fe6c48fe65dc5a2f9a43bc281ce637af2","sha256":"2e740bd038b2485a01f3c782e4b324dcd2612dc19e90d3a10a96fb149efab836","sha512":"fe486ad99511ac614c43d56424b90973730d6decc5bfbbfc1233933aa2a31deea6382ec4b1c6364ab58e881911eeb9cd6bfe2c1d7064294c9bbfbb0bd4a9a23d","ssdeep":"","tlshash":"fe81253a626229361cef4099affba7a07dd3603b8155e901705cde856f5cd0006b9fed","size":4061,"data":"","first_seen":"2026-08-11T22:06:30.907083Z","last_seen":"2026-09-13T13:02:43.418115Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ad2bdddd946bd154f5878c355eb5348","sha1":"d324a5c2e10fdb27ccac1d1ac18893f786072ce8","sha256":"bcc520c1886076241bb3fc4ae84529acff4f2067a0f07c81fcceb74037d06685","sha512":"40dc6d96dedc4090daafca64b4e302161254e033f46c80522f87a2486064c95e262aaf1cd09f74f8abdf1440cbb6316f1083e17a12991ba1875482989b4df854","ssdeep":"","tlshash":"33c09b9e5491558d26d618714a07711524bb08f7040c5a44e14197a6a57d37f4357a8a","size":132,"data":"","first_seen":"2026-07-16T21:08:02.087495Z","last_seen":"2026-09-13T13:02:43.419094Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a81334bc09ae3464fd02a6358ffa2be1","sha1":"bd875bc2a40c8b8384d3a8aae2e97eb5d3015046","sha256":"50fa5e102b932f0e483778694f9cd208adf2ec56af262610033ccdb7a39d68e6","sha512":"52b6d778089ee5000905b6be8d7d9feac5f08c8681031de1fdac4e91effa91290640c0b5dd4c435465f9e75612348fb6b53f902dac32ef6e67a01af622f7479f","ssdeep":"","tlshash":"9c01b194eca335f12e7374b3b7e9834d55a800171c12c9a2761d12440f68e6529b63d0","size":825,"data":"","first_seen":"2026-09-13T00:47:22.599952Z","last_seen":"2026-09-13T12:46:26.708426Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/pw-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeea57035ae8f0d19cd1ac5252686980","sha1":"08bdd6aa8d1e93b6da1279940f5f7428aae0d381","sha256":"f21100d61c95c30f0c3e614be95b5daeb9b6a6719d0243e6bb95912f97886364","sha512":"369e8cb18df6e1f0b8cc9005675bfd0e258364f76b9e24fb4e8b9890d6edd1bc96c71dbf1384b2e0607dbdf92940244738df420e0147ee826df76d6c8259c11c","ssdeep":"","tlshash":"3e313367f4932ab09ab7a67f57ab81493175400b240bc2103e1c975c7ffed1a8276bc2","size":1504,"data":"","first_seen":"2026-09-13T00:47:22.593012Z","last_seen":"2026-09-13T13:02:43.417129Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/lo.js?v=1789303543","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08658c97ce98dd769fafbc31aa0dfc23","sha1":"db93827706cf007d9317cb9c6b580f391411ae14","sha256":"3df45a299f1668b2179daa2a604367da744b23a4480dd3f662a5fca3339520c6","sha512":"343f5693d459fc446b0126b77c1ad340b8f20bbfe883dd11c1dc3832b5affdd95c26729f3179fade12e9a3aa24ee77e2c5ade0f20ece6cdaca605deffa9e25fb","ssdeep":"","tlshash":"1e31fd5b6ab3503517fb62b9096b0904395a05a70b0ac9463e0c4160cfb5bbb8135ff9","size":1814,"data":"","first_seen":"2026-09-13T00:47:22.585711Z","last_seen":"2026-09-13T13:02:43.405606Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/logger.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ae1fac5c7992701dba6466b919a449c","sha1":"cc175b8dd564b2bfc356e7ed91019d6f08660dad","sha256":"85e776ea81cbe5ca15bb3cad0ad0a453b50278e84867069b7a24b6e3a43a6f35","sha512":"f6f2ad9d1032e36d9f683d444e8576651b3ad1647f4b07142ac26845d1ee3448fe207331eb9813866217771388d1885b6cf3b40a4eb27136bbf086d868205a5a","ssdeep":"","tlshash":"32110c1b35be0071523b20be058f9700ba65c5c70616cf123e8c2622ef18d7e1ab9b89","size":877,"data":"","first_seen":"2026-08-11T22:06:30.904897Z","last_seen":"2026-09-13T13:02:43.415403Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/activity-tracker.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0831c2d1254e3ee5d3a03d115855de0a","sha1":"123a26583b1d3c43139b877f2dd17d1be76be3eb","sha256":"6a47696eaba6f35a08efdcd4a03d6e5817968f39480a780ceb1eb544caa8e465","sha512":"2a9302bc3a0adb40dfd54d7780413f78b6808f595b44cd61fcb265ab41fab9f668959e03c708936c88d252b105e129b1fcaf6aa7686418e28ad26a4dc6b306f4","ssdeep":"96:Aeq1AhyxjIBMxQ8MT7e1HH5+HXOqbpyDwr5Hk2nXwuJ6AGLwsxOT0b:vq1AhyxwME3eNkXbp/nhJ3QwhG","tlshash":"2cd1849aa8e321b1b977307e47ef7101393b40471406c950be5daa049fb8e6c02b6fde","size":6572,"data":"","first_seen":"2026-08-11T22:06:30.899673Z","last_seen":"2026-09-13T13:02:43.41629Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"iwuaawdjdwja.com/images/1.ico","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:44.262Z","timestamp":1789303544262,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /images/1.ico HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sat, 08 Aug 2026 23:02:19 GMT\r\nETag: \"1536-658911cec14c0\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5430\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5430,"size_decoded":5808,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f3418a443e7d841097c714d69ec4bcb8","sha1":"49263695f6b0cdd72f45cf1b775e660fdc36c606","sha256":"6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770","sha512":"82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563","ssdeep":"48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B","tlshash":"65b1b8b7e6c63030c85805bc49373a6d1e1b6ee31a9cf064fecc326a1a320d175256be","first_seen":"2023-04-05T04:39:39Z","last_seen":"2026-09-13T14:25:03.142915Z","times_seen":89438,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:12.185Z","timestamp":1789303572185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":27942,\"ts\":1789303572183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:12 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=65\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:16.185Z","timestamp":1789303576185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":31943,\"ts\":1789303576184}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:16 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=60\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:13.561Z","timestamp":1789303573561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:13 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=63\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/py.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.837Z","timestamp":1789303543837,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/py.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"57ca-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4457\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22474,"size_decoded":4878,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (448)","md5":"179c2f04aff2d23f8cc3085318e071f3","sha1":"c92220130d70ffe02fe97fdcdb570a478a6e3e37","sha256":"4532984c494e94d7e4e1b66a83ba92f6696a0be16b76c40fe4fd60f631dc38a3","sha512":"6b860722b9c3833832360c783715c913d0affc0b9a5566f79aa26bc9c298fe852befe6789ac4a1a35ebaf3f623147cf7124a0ceb3f778ba05600dd8570b6e848","ssdeep":"384:AH24Y62HPCIzNXI6z7zByMnIEoipedWKRXzG:k3Y62HPw6H0EoiprQXzG","tlshash":"baa2cd8cfaf361e08227b13d47df95466634c993080ced657c4c5a606f12eac56f9be8","first_seen":"2025-01-13T22:55:36.921043Z","last_seen":"2026-09-13T13:02:43.41304Z","times_seen":46,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":52,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/logger.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.838Z","timestamp":1789303543838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/logger.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"36d-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 390\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":877,"size_decoded":810,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9ae1fac5c7992701dba6466b919a449c","sha1":"cc175b8dd564b2bfc356e7ed91019d6f08660dad","sha256":"85e776ea81cbe5ca15bb3cad0ad0a453b50278e84867069b7a24b6e3a43a6f35","sha512":"f6f2ad9d1032e36d9f683d444e8576651b3ad1647f4b07142ac26845d1ee3448fe207331eb9813866217771388d1885b6cf3b40a4eb27136bbf086d868205a5a","ssdeep":"","tlshash":"32110c1b35be0071523b20be058f9700ba65c5c70616cf123e8c2622ef18d7e1ab9b89","first_seen":"2026-08-11T22:06:30.904897Z","last_seen":"2026-09-13T13:02:43.415403Z","times_seen":9,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":53,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/activity-tracker.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.842Z","timestamp":1789303543842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/activity-tracker.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Mon, 10 Aug 2026 20:11:49 GMT\r\nETag: \"19ac-658b6f6d96b40-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2265\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6572,"size_decoded":2687,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0831c2d1254e3ee5d3a03d115855de0a","sha1":"123a26583b1d3c43139b877f2dd17d1be76be3eb","sha256":"6a47696eaba6f35a08efdcd4a03d6e5817968f39480a780ceb1eb544caa8e465","sha512":"2a9302bc3a0adb40dfd54d7780413f78b6808f595b44cd61fcb265ab41fab9f668959e03c708936c88d252b105e129b1fcaf6aa7686418e28ad26a4dc6b306f4","ssdeep":"96:Aeq1AhyxjIBMxQ8MT7e1HH5+HXOqbpyDwr5Hk2nXwuJ6AGLwsxOT0b:vq1AhyxwME3eNkXbp/nhJ3QwhG","tlshash":"2cd1849aa8e321b1b977307e47ef7101393b40471406c950be5daa049fb8e6c02b6fde","first_seen":"2026-08-11T22:06:30.899673Z","last_seen":"2026-09-13T13:02:43.41629Z","times_seen":9,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:50.420Z","timestamp":1789303550420,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:50 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:52.185Z","timestamp":1789303552185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 112\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":112,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":7942,\"ts\":1789303552183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:52 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:56.185Z","timestamp":1789303556185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":11941,\"ts\":1789303556182}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:56 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=85\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:57.557Z","timestamp":1789303557557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:57 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=83\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:52.423Z","timestamp":1789303552423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:52 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:54.476Z","timestamp":1789303554476,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:54 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/fonts/roboto-regular.woff2","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:44.202Z","timestamp":1789303544202,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /fonts/roboto-regular.woff2 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 13 Sep 2026 12:45:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 279\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":279,"size_decoded":572,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c90c71c23195a6cfd5de71a1fce7d1da","sha1":"017a7b729a403e7938c2d54ec00b7b427a1fef37","sha256":"e0341a0ef8a0beddf7db2edbd570b7195d1ef4f4c20ff087f0e25eaf123e9feb","sha512":"e304ab549e7e61109df9cf003c6d1215e58fe08e24165135979810b6eddc469942ffbb772ea3a3c0f8ba1a1b7d57cf5cb42b9aec5119313937fa68f7efbfed88","ssdeep":"","tlshash":"52d02b9e5043639b4c12195039c115c2268e23f6b43a86e82dc7d487529863ecddaa8d","first_seen":"2026-09-13T07:50:33.095644Z","last_seen":"2026-09-13T13:02:43.394986Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:01.557Z","timestamp":1789303561557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:01 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=78\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:04.187Z","timestamp":1789303564187,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":19942,\"ts\":1789303564183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:04 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=75\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:08.560Z","timestamp":1789303568560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:08 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=69\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/plugins/@fortawesome/fontawesome-free/css/all.css","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.831Z","timestamp":1789303543831,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/plugins/@fortawesome/fontawesome-free/css/all.css HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sat, 08 Aug 2026 23:02:20 GMT\r\nETag: \"1e1ce-658911cfb5700-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 19486\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":123342,"size_decoded":19902,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"fe11a3a32db7284d920063f21e7d3777","sha1":"850d2a2e0b6c640e41c71b2dab4b9d8cc562cdf6","sha256":"f155c0695c709ebdf9b5ade6f73516572a1fda0ad53a2577cd67c27309a53bb8","sha512":"13ee779179c9cae6454b3ef9c529937c2a54363de0a7d05df344de4103133c94d55834473cea4461ccc6c16b6c657bda8b3dbb72abe1747f14fa0fcd318b9adc","ssdeep":"1536:i8mrmZmrm7mrm8mrmCXmrm9mrmPmrm8slCB7Wm29eCFIEXoMEPlO6CxpIt2xNnJB:DmB7Wm29eYoMEPlOEt2xNnI6","tlshash":"9fc377fa90ff10d48311e4892747e2a4b739b62c9c0b4c58e2a67d8de6c065cb1d6bdd","first_seen":"2023-04-17T06:41:49Z","last_seen":"2026-09-13T13:02:43.411801Z","times_seen":264,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:00.557Z","timestamp":1789303560557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=79\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:09.561Z","timestamp":1789303569561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:09 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=68\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/login.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:45:42.887Z","timestamp":1789303542887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nSet-Cookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 18214\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"36m42fnp8vo6gquhigctrnut9o","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=36m42fnp8vo6gquhigctrnut9o; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":131786,"size_decoded":18713,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (494)","md5":"81e007159f3d42bbe4105ce7688adb5b","sha1":"a17163d4ec51f5ba51fa0bbb500dec062d18d0ce","sha256":"57e4964524023f50cd9c5aee73afe2c3132d6a3d75ac39935cd9b8048ba5e599","sha512":"9442fc60b262dafc06c088e6d7c8fa68c0f7ce303534888051468e1e31ecb5d5f82d4582632a842e0a36c887df45b1f2bb5fc4a01b2f97707829e802a83cc324","ssdeep":"1536:cTk+Vlk+VSk+Vc0t7iX3vQMMJrD9hgfPadZHaKOo+wxqwDXTBnN/AOnQT:cB0t7iX3vQMMMo++qwDQ","tlshash":"d8d383de8a73206bac23217a53ef8658b778e443e519efa17ddc4205cf887e804e6751","first_seen":"2026-09-13T12:46:26.699349Z","last_seen":"2026-09-13T12:46:26.699349Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":4,"connect":52,"send":0,"wait":618,"receive":53,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/pw-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.843Z","timestamp":1789303543843,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/pw-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:02:30 GMT\r\nETag: \"5e0-658d0d16b8f63-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 701\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1504,"size_decoded":1120,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"eeea57035ae8f0d19cd1ac5252686980","sha1":"08bdd6aa8d1e93b6da1279940f5f7428aae0d381","sha256":"f21100d61c95c30f0c3e614be95b5daeb9b6a6719d0243e6bb95912f97886364","sha512":"369e8cb18df6e1f0b8cc9005675bfd0e258364f76b9e24fb4e8b9890d6edd1bc96c71dbf1384b2e0607dbdf92940244738df420e0147ee826df76d6c8259c11c","ssdeep":"","tlshash":"3e313367f4932ab09ab7a67f57ab81493175400b240bc2103e1c975c7ffed1a8276bc2","first_seen":"2026-09-13T00:47:22.593012Z","last_seen":"2026-09-13T13:02:43.417129Z","times_seen":7,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:47.271Z","timestamp":1789303547271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:47 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:51.421Z","timestamp":1789303551421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:51 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:06.559Z","timestamp":1789303566559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:06 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=72\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/device-detector.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.834Z","timestamp":1789303543834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/device-detector.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"a745-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15387\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":42821,"size_decoded":15810,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36071)","md5":"09e1ecf015837733d349467996e3464f","sha1":"25cd8988056bad199f3907d71b3fb01d744dafd2","sha256":"3e56830ea38e9bfb8e324b1995c60b0f7ae4dce529d9a67dd27a23705888fb8f","sha512":"8e98831b86e06bb41ba863031696530b6e8fddcad46bb021dfaf38070b7ee4d46ae710ed48903ae8ee2bf0e3139d9fcb037034d846958f70b892569b79bdcb27","ssdeep":"768:M9AgbMRdWMxaEKBK/4DKHBu2P6fcuqhU4CTToMrdeUwod8GroNea:MmcEKBog/q21YNH","tlshash":"ad13293fe312b7144396ed99d80740009e365c2aee95b4a5f9d8b640eec68b121bff71","first_seen":"2026-08-11T22:06:30.895307Z","last_seen":"2026-09-13T13:02:43.401265Z","times_seen":9,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":41,"send":0,"wait":52,"receive":41,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:46.270Z","timestamp":1789303546270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:46 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:53.477Z","timestamp":1789303553477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:53 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:44.243Z","timestamp":1789303544243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 134\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":134,"data":"{\"action\":\"event\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":0,\"ts\":1789303544241,\"event\":\"viewing login\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:08.242Z","timestamp":1789303568242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":23942,\"ts\":1789303568183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:08 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=70\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/gauth-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.847Z","timestamp":1789303543847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/gauth-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:02:18 GMT\r\nETag: \"c73-658d0d0b89642-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1116\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3187,"size_decoded":1536,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c2d673aaef4bbe6be92ecd77cdedf2e1","sha1":"9df6116ee08b76359d04cc56da932e1b31cf0f1f","sha256":"b4156c5c0e6e7bcb3ef914cc7340640af5ba9259b15fb4ae6d2ae173f3a57766","sha512":"35b3c36205b8d0eb02231094c1a52724cd2146b7736bcde9fd0d351c7f37643a7e1e459f1d01ff420dc4fef09470dc758bc91b7a1a00e96ae564a161c3c35110","ssdeep":"","tlshash":"c86131a6b1a15db1457b1bb793eb83c67278400ba40ae4463d6c13859fe9c508375bc9","first_seen":"2026-09-13T00:47:22.587283Z","last_seen":"2026-09-13T13:02:43.402411Z","times_seen":7,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:55.556Z","timestamp":1789303555556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:55 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:00.184Z","timestamp":1789303560184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 113\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":113,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":15942,\"ts\":1789303560183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:00 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=80\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:05.559Z","timestamp":1789303565559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:05 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=73\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:11.560Z","timestamp":1789303571560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:11 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=66\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:17.562Z","timestamp":1789303577562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:17 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=58\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:18.562Z","timestamp":1789303578562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:18 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=57\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:56.556Z","timestamp":1789303556556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:56 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=84\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:16.561Z","timestamp":1789303576561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:16 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=59\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/lo.js?v=1789303543","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.835Z","timestamp":1789303543835,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/lo.js?v=1789303543 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Thu, 10 Sep 2026 03:03:06 GMT\r\nETag: \"716-65b1834fc9930-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 533\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1814,"size_decoded":953,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"08658c97ce98dd769fafbc31aa0dfc23","sha1":"db93827706cf007d9317cb9c6b580f391411ae14","sha256":"3df45a299f1668b2179daa2a604367da744b23a4480dd3f662a5fca3339520c6","sha512":"343f5693d459fc446b0126b77c1ad340b8f20bbfe883dd11c1dc3832b5affdd95c26729f3179fade12e9a3aa24ee77e2c5ade0f20ece6cdaca605deffa9e25fb","ssdeep":"","tlshash":"1e31fd5b6ab3503517fb62b9096b0904395a05a70b0ac9463e0c4160cfb5bbb8135ff9","first_seen":"2026-09-13T00:47:22.585711Z","last_seen":"2026-09-13T13:02:43.405606Z","times_seen":7,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":41,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:49.333Z","timestamp":1789303549333,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:49 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:04.558Z","timestamp":1789303564558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:04 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/fonts/roboto-regular.woff2","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:44.203Z","timestamp":1789303544203,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /fonts/roboto-regular.woff2 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 13 Sep 2026 12:45:44 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 279\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":279,"size_decoded":572,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"c90c71c23195a6cfd5de71a1fce7d1da","sha1":"017a7b729a403e7938c2d54ec00b7b427a1fef37","sha256":"e0341a0ef8a0beddf7db2edbd570b7195d1ef4f4c20ff087f0e25eaf123e9feb","sha512":"e304ab549e7e61109df9cf003c6d1215e58fe08e24165135979810b6eddc469942ffbb772ea3a3c0f8ba1a1b7d57cf5cb42b9aec5119313937fa68f7efbfed88","ssdeep":"","tlshash":"52d02b9e5043639b4c12195039c115c2268e23f6b43a86e82dc7d487529863ecddaa8d","first_seen":"2026-09-13T07:50:33.095644Z","last_seen":"2026-09-13T13:02:43.394986Z","times_seen":4,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/activity-beacon.php","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:48.184Z","timestamp":1789303548184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"POST /opsroom/inc/activity-beacon.php HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 112\r\nOrigin: https://iwuaawdjdwja.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":112,"data":"{\"action\":\"ping\",\"page\":\"login\",\"url\":\"/login.php\",\"referrer_host\":\"\",\"time_on_page_ms\":3942,\"ts\":1789303548183}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 49\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49,"size_decoded":431,"mime_type":"application/json","magic":"JSON text data","md5":"16a801dc9a08996379b1c0b289e19634","sha1":"7d601a21f1c4cd524e6516ecf8076f37d4d5d7bf","sha256":"4da299d4b183df7dfb4c12eb567a7a1cfd1fd8faeb0afdf7e41ec1b46eebf574","sha512":"1ebd4fc3eb92df0112fa0963c8db51f55aa7908cb12972aaa510b6caa29573079eb2d2a4d54b79be657d64315ca1657254ad69f3c187fdc12569a66e45bb0347","ssdeep":"","tlshash":"d19002524c5210528404528550242a8878f86c2380201118a09cd20a8518206289794a","first_seen":"2026-08-11T22:06:30.894336Z","last_seen":"2026-09-13T13:02:43.40017Z","times_seen":9,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:58.557Z","timestamp":1789303558557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:58 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=82\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:59.557Z","timestamp":1789303559557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:59 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=81\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:07.597Z","timestamp":1789303567597,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:07 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=71\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:45.183Z","timestamp":1789303545183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:45 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:48.270Z","timestamp":1789303548270,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:48 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:03.558Z","timestamp":1789303563558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:03 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=76\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:14.561Z","timestamp":1789303574561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:14 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=62\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/jq.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.832Z","timestamp":1789303543832,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/jq.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Sun, 09 Aug 2026 03:45:15 GMT\r\nETag: \"4472c-6589510c548c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":280364,"size_decoded":83705,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"11c05eb286ed576526bf4543760785b9","sha1":"7faa15a054093f3b5d674e63b6567c835a6fa217","sha256":"5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55","sha512":"b096b9296ab717df5039e8a350e9bd3be0600e056dceb58105a819b63956ec5dc8e3b34ed4e68d26f6eeb7ef4a38f9a336be166f76e5538bd0890762f9993ac2","ssdeep":"6144:V0Hh4V/Y+TCtlIhTze/RZcYmDvzK8m/7EtPx+WI+Y7cFys/CL/+uQxN0IPfKuGAv:atZcYmDhOgPx+WI+Y7cFycuq1PfQAv5B","tlshash":"4454a4d9f78d112e423231aa9c2f12cdb77cd1b1560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-09-13T13:02:43.404959Z","times_seen":2584,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":74,"receive":82,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/assets/js/code-hook.js","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:45:43.845Z","timestamp":1789303543845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/assets/js/code-hook.js HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://iwuaawdjdwja.com/login.php\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:45:43 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Wed, 12 Aug 2026 03:00:03 GMT\r\nETag: \"bdf-658d0c8a5c9eb-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1124\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3039,"size_decoded":1544,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bd1d428384ea064292c3b52f6207f68e","sha1":"ccc860d664cf9adf4af5083e856d2a8ffc71632b","sha256":"1eccdd5b45b15434f48572cc940ffea43bef5c3067c7bab3b79181f57e69eb2f","sha512":"608ce1a5e8b4fe038d817ce571eceda225907f05067b46f964cf9c5d0ad14750cae90f281a3c82aebd7ec1aa3ce1bf5a6b94906e0916c200e26dfb8a1c0162ea","ssdeep":"","tlshash":"38512e18e8e31bb59777b07a837f102a31a0104f2488c952bc5c92601fe1e6431eaaea","first_seen":"2026-09-13T00:47:22.589534Z","last_seen":"2026-09-13T13:02:43.408264Z","times_seen":7,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:02.559Z","timestamp":1789303562559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:02 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=77\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:12.560Z","timestamp":1789303572560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:12 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=64\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:15.561Z","timestamp":1789303575561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:15 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=61\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"iwuaawdjdwja.com/opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010","fqdn":"iwuaawdjdwja.com","domain":"iwuaawdjdwja.com","tld":"com"},"ip":{"addr":"64.89.161.140","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://iwuaawdjdwja.com/login.php","date":"2026-09-13T12:46:10.560Z","timestamp":1789303570560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwuaawdjdwja.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 00:47:06 GMT","end":"Wed, 09 Dec 2026 00:47:05 GMT"},"fingerprint":{"sha1":"A8:FC:47:CE:FB:1E:52:C4:D4:F8:88:A8:E2:AA:E1:35:22:BF:3C:FB","sha256":"CE:AD:41:C7:12:46:6F:E7:F1:31:74:90:0A:02:6F:5D:90:FB:24:02:66:91:F7:71:6D:9A:FD:C1:81:82:31:FE"}}},"request":{"raw":"GET /opsroom/inc/action.php?type=loader\u0026page=login.php\u0026loading=0\u0026fingerprint=1feb0dd8-f80e-a1ec-6ba6-7b0c15fa899a\u0026kind=Desktop\u0026match=Windows%2010\u0026model=Windows%2010 HTTP/1.1\r\nHost: iwuaawdjdwja.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=36m42fnp8vo6gquhigctrnut9o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 13 Sep 2026 12:46:10 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nContent-Security-Policy: frame-ancestors *\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=67\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":389,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T15:24:39.238808Z","times_seen":18444677,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"iwuaawdjdwja.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}}]}