{"report_id":"1b83de78-c194-4480-a634-187fd8742b75","version":0,"status":"done","tags":[],"date":"2026-07-08T11:45:46Z","url":{"schema":"https","addr":"tt-come.cfd","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":0,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"title":"Kleinanzeigen - Anmelden","dom":{"size":58039,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (354)","md5":"37bfec9902c0af06831ff46d65fe80b6","sha1":"6a0e074e97630b560d4f453259a453fbcf3e1a22","sha256":"4e9324af98e6c97b07858c0d5416bbe06e80abe2c5d8cf7dc23b9dfdab3e8e26","sha512":"0c7f1a0946678fec7a49c19994c66c66d3a5f72309aad4d42786c133768b051c482de603d2237ed61c2026c61ace57c7d897a46835028d00288646fbc7f80442","ssdeep":"384:S4ezBMf1sPcglaHd3Kua/ntOMeyXCPLrCLPYCLP4ps4dl0Kb6kK5m3Xz43/nJCSG:wzBMYzladKuyanwFqr","tlshash":"bf431b5a25f308256a53f0b9abdb6705333280175807ca157fbca32d5f93d888a727ed","dom_hash":"domhashb258ceffd585ccaff72f713a325d181b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tt-come.cfd","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":0,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-12T11:45:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tt-come.cfd","ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-08T01:41:58.699764Z","last_seen":"2026-07-08T01:41:58.699764Z","alert_count":10,"request_count":5,"received_data":68666,"sent_data":2983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"07c401f3104f2e99cfffe470290e6373","sha1":"4cad9c03ad172294f37b087c67c380c148799411","sha256":"f35d05cc133579eda0649d8cae5d0dfb6d0557bc0294ae52e987465b8f772999","sha512":"90f4ca9032c0e13494c00920c51cdf47dc2e5c95bf3dfcf46398a83a6ecb43c9999ca463d4676a2e6cb1784062985dd38932f6d798bdf395cd9cc1cc49041434","ssdeep":"","tlshash":"fec02b2604603c7154f088c2f2d3370a30aed2304420084ee5db435320fd9284630c9a","size":138,"data":"","first_seen":"2026-07-08T11:45:49.847798Z","last_seen":"2026-07-08T11:45:49.847798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd8729c3c6803734fc638c1921da74e6","sha1":"34bec253c7017f472e43d46058ff465372312bb4","sha256":"8a1caa438b298a626d21503b2229e31544596984abf1e5949e7ab6325333d441","sha512":"d3d6acee86f2622eedcbd5103f6bbf208369e5d30821aa2846e9518c5e67abf4dcc02256b7eae3f7d51092d2a91c701aaf1de265d2ff6f138c2e1946d8cfcf8a","ssdeep":"","tlshash":"7241ce98f8e21193a82770398b3fe114773b582b184fc851bdac94a01fa161d86a9fcc","size":1982,"data":"","first_seen":"2026-07-08T11:45:49.849083Z","last_seen":"2026-07-08T11:45:49.849083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"83090fc779ae1dd4f066ea41494bc2b3","sha1":"fb7e330d3f65e2a6e5d0dd4b24dde627266810fd","sha256":"150aee74d408ee6ba2cfa14a04d8726be35aec8d3a26caa7e3a701ce4f479d62","sha512":"1c372582085186d05fbf5b17fee7b58d2f18cceb4242bca68540b90e39a83be6ca4fd7b6b8a1f44e57f9b1cf1e1acd9a68f412ebb4b6c5c5d223a6292c2b0a28","ssdeep":"384:P/ntOMeyXCPLrCLPYCLP4ps4dl0Kb6kK5m3Xz43/nJCSmJZSSIdJfzNUtkY2MDtU:3anwFqc","tlshash":"d5e2c76939f314294793f0ba978b6205323650273c16c6457f7c932e2fb3d5886a27ee","size":31933,"data":"","first_seen":"2026-07-08T11:45:49.850086Z","last_seen":"2026-07-08T11:45:49.850086Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tt-come.cfd/assets/insecure-password.svg","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tt-come.cfd/","date":"2026-07-08T11:45:23.991Z","timestamp":1783511123991,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt-come.cfd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 07:53:12 GMT","end":"Sun, 04 Oct 2026 07:53:11 GMT"},"fingerprint":{"sha1":"AF:08:F3:D4:59:93:AA:8F:04:9B:62:9A:E6:3C:AD:E2:25:AB:5F:DE","sha256":"E1:85:E8:37:C0:63:7A:3A:41:47:F4:72:42:EC:63:A6:5F:48:8F:A1:6E:03:A6:96:2A:F5:19:02:8A:DE:9F:33"}}},"request":{"raw":"GET /assets/insecure-password.svg HTTP/1.1\r\nHost: tt-come.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tt-come.cfd/\r\nCookie: __s=eyJ0cyI6MTc4MzUxMTEyMzUxNCwibiI6IjIzZjBjZTUyOWVlNmExYmMifQ.yzXAqSg3nvci9AxjTFHb6MQeKXGkBt4sPxbZJ6RRRaw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 08 Jul 2026 11:45:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3702\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 24 Jun 2026 13:38:35 GMT\r\nETag: W/\"e76-19ef9da9f78\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3702,"size_decoded":3993,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb276b27b99b53dbfaa0da32f2697fb2","sha1":"cb1c6b96bca8dc5792e941cd0ca3fdc609483a78","sha256":"787fc50082b76bb5fa3b5281d939cfe0c16c02fe9a1077c37ac7c737a64297ec","sha512":"ef7d713ef91b6cdea55ca9ac33c003ef719e4c4d4a34330f8f6190a29e29aca304b3688640e9a3e18fe03a1adce802d5ff9bfee44872a6011698bd0311f5a99f","ssdeep":"","tlshash":"197132c533306b6ce9c79b6ecf2df5d4511f20b9a46192c48fbf8638650b948fa26c94","first_seen":"2026-07-08T11:45:49.842671Z","last_seen":"2026-07-08T18:32:07.750739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":16,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/favicon.ico","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tt-come.cfd/","date":"2026-07-08T11:45:24.054Z","timestamp":1783511124054,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt-come.cfd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 07:53:12 GMT","end":"Sun, 04 Oct 2026 07:53:11 GMT"},"fingerprint":{"sha1":"AF:08:F3:D4:59:93:AA:8F:04:9B:62:9A:E6:3C:AD:E2:25:AB:5F:DE","sha256":"E1:85:E8:37:C0:63:7A:3A:41:47:F4:72:42:EC:63:A6:5F:48:8F:A1:6E:03:A6:96:2A:F5:19:02:8A:DE:9F:33"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tt-come.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tt-come.cfd/\r\nCookie: __s=eyJ0cyI6MTc4MzUxMTEyMzUxNCwibiI6IjIzZjBjZTUyOWVlNmExYmMifQ.yzXAqSg3nvci9AxjTFHb6MQeKXGkBt4sPxbZJ6RRRaw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 08 Jul 2026 11:45:24 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 9\r\nConnection: keep-alive\r\nETag: W/\"9-CUt2O0z8wLBeXQQFgc1RPDyggGc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9,"size_decoded":228,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d8f4a1993546cc4b850cde3599e27aec","sha1":"094b763b4cfcc0b05e5d040581cd513c3ca08067","sha256":"907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9","sha512":"7c696247f98aa6fe4e1df001fd6029abbbccf45b122d65dfdede8f8a400cda775387c657f96bd1e4e52da7409187892b1f0786c54d835d2e44227b2e1335eaf6","ssdeep":"","tlshash":"4a50000c0003030c0000003000c00030000c03000c0000300000c00c00000000c000cc","first_seen":"2023-03-08T07:11:06Z","last_seen":"2026-07-17T08:46:57.359861Z","times_seen":22160,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:45:23.275Z","timestamp":1783511123275,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt-come.cfd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 07:53:12 GMT","end":"Sun, 04 Oct 2026 07:53:11 GMT"},"fingerprint":{"sha1":"AF:08:F3:D4:59:93:AA:8F:04:9B:62:9A:E6:3C:AD:E2:25:AB:5F:DE","sha256":"E1:85:E8:37:C0:63:7A:3A:41:47:F4:72:42:EC:63:A6:5F:48:8F:A1:6E:03:A6:96:2A:F5:19:02:8A:DE:9F:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tt-come.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 08 Jul 2026 11:45:23 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nETag: W/\"3ea-1BAr4MJ1iPaRa6wh5/++d8mgcis\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1002,"size_decoded":977,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7fda2c6be0b6582755c0dad11af3e99e","sha1":"d4102be0c27588f6916bac21e7ffbe77c9a0722b","sha256":"cca687c73d2ea6ba29ff46c9acf395951e4ec42a062dc2ee826faa0d33b661f4","sha512":"eea83c25c03180954a82e6dc95dda12ff79d49c8ec3eefffd9a53efc81008de67c9b587fb94a91d3104a135602a5ced0e929f73b7873356bb6ddf82def7ccc89","ssdeep":"","tlshash":"601198b699825809d523c57136f1a78c64f0ac70d253d88615d6b65dc4c1f8d1530b9c","first_seen":"2026-07-08T11:45:49.84462Z","last_seen":"2026-07-08T11:45:49.84462Z","times_seen":1,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":124,"connect":15,"send":0,"wait":72,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-08T11:45:23.921Z","timestamp":1783511123921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt-come.cfd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 07:53:12 GMT","end":"Sun, 04 Oct 2026 07:53:11 GMT"},"fingerprint":{"sha1":"AF:08:F3:D4:59:93:AA:8F:04:9B:62:9A:E6:3C:AD:E2:25:AB:5F:DE","sha256":"E1:85:E8:37:C0:63:7A:3A:41:47:F4:72:42:EC:63:A6:5F:48:8F:A1:6E:03:A6:96:2A:F5:19:02:8A:DE:9F:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tt-come.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tt-come.cfd/\r\nCookie: __s=eyJ0cyI6MTc4MzUxMTEyMzUxNCwibiI6IjIzZjBjZTUyOWVlNmExYmMifQ.yzXAqSg3nvci9AxjTFHb6MQeKXGkBt4sPxbZJ6RRRaw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 08 Jul 2026 11:45:23 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"e1f7-vKAFBlgvtT68Aj0oraXGppQgDHQ\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57847,"size_decoded":15366,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (354)","md5":"cf916098af5a93fd415deb4512a200ee","sha1":"bca00506582fb53ebc023d28ada5c6a694200c74","sha256":"cfe117059e91ec9352afa902aa7984cdddb7dd9a7764e13e71e3e81d9c94fc45","sha512":"9dd223634ffaef2cb0fb0ded9ca3f84b072e91b144f224fbbd61eaf26339713d0eea191eff9d920138214590c9adcda8c9a78357b5a09cd25866f77d0fbc14ab","ssdeep":"384:04ezBMf1sPcglaHd6Urud/ntOMeyXCPLrCLPYCLP4ps4dl0Kb6kK5m3Xz43/nJCv:+zBMYzlacguZanwFqv","tlshash":"eb431a5a29f308256653f0b9abdb5705333280175807ca157fbca32d5f93d888a727ed","first_seen":"2026-07-08T11:45:49.84551Z","last_seen":"2026-07-08T11:45:49.84551Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tt-come.cfd/assets/logo.svg","fqdn":"tt-come.cfd","domain":"tt-come.cfd","tld":"cfd"},"ip":{"addr":"87.120.107.174","port":443,"asn":174,"as":"COGENT-174","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tt-come.cfd/","date":"2026-07-08T11:45:23.989Z","timestamp":1783511123989,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tt-come.cfd","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 07:53:12 GMT","end":"Sun, 04 Oct 2026 07:53:11 GMT"},"fingerprint":{"sha1":"AF:08:F3:D4:59:93:AA:8F:04:9B:62:9A:E6:3C:AD:E2:25:AB:5F:DE","sha256":"E1:85:E8:37:C0:63:7A:3A:41:47:F4:72:42:EC:63:A6:5F:48:8F:A1:6E:03:A6:96:2A:F5:19:02:8A:DE:9F:33"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: tt-come.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tt-come.cfd/\r\nCookie: __s=eyJ0cyI6MTc4MzUxMTEyMzUxNCwibiI6IjIzZjBjZTUyOWVlNmExYmMifQ.yzXAqSg3nvci9AxjTFHb6MQeKXGkBt4sPxbZJ6RRRaw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 08 Jul 2026 11:45:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4786\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 24 Jun 2026 13:38:34 GMT\r\nETag: W/\"12b2-19ef9da9b90\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4786,"size_decoded":5078,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"084c26a7726e4b5d7387b435a22e8ade","sha1":"5b9f738de4af48338a390cd866eda2d0c7b8657d","sha256":"9264b3724cab36719053345d6b9fc1c37208c5ee22759671aef9d78c180e0f4a","sha512":"79107b3d7f61da25b1211a1180cfaddf75d295cdb22afe3e592681e70001ee88dd255cce890e4b828844e1240d246aa3668b121cc8d555b12e21654c8e133fe7","ssdeep":"96:Yzt+AiFPJUf85b6t4YUHJE3jGnSkhRYVXgizqhAHWLEoKOOiPFLYP3+LF9Q1VnqZ:YAwfoDTH2zGn/rYNgWqAW3KOLtLYP3+Z","tlshash":"9ca162e9fbb4b8b8adca1b87e33499b9b5d6f4bc2121c744811dda9c4bd3c0cac18415","first_seen":"2023-07-15T01:36:54Z","last_seen":"2026-07-16T02:46:32.576015Z","times_seen":264,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-08","alert":"Phishing Block","trigger":"tt-come.cfd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-08","alert":"Sinkholed","trigger":"tt-come.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}