{"report_id":"220bef70-82cf-41c3-8d53-51c601b50142","version":0,"status":"done","tags":[],"date":"2026-10-03T19:58:04Z","url":{"schema":"http","addr":"worldcheckgroup.online/","fqdn":"worldcheckgroup.online","domain":"worldcheckgroup.online","tld":"online"},"ip":{"addr":"46.29.26.38","port":0,"asn":132359,"as":"M/S ROBI TRADERS","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"worldcheckgroup.online/","fqdn":"worldcheckgroup.online","domain":"worldcheckgroup.online","tld":"online"},"title":"Loading","dom":{"size":2558312,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51221)","md5":"c7ade0ab6d99b07cb76647762586b2fb","sha1":"423d321be94504eaa81e9d31a119456490605ba3","sha256":"af6e5a4da823a502152364271628b645dfa06ef65bc5b902c0f3686fb891c4a3","sha512":"8f161dec0dd4edb28caad95601931c8e9a36cb21e446896e6cdcc7157a3ad4b669158c7d58f9fd2e0cd78ed9d4afe9766ab4166d7513b065bdef68c3e6783937","ssdeep":"12288:owYQO0vksd9gkCGczb1CZzn+V1LIe83LyBFRmc9mRfHfyxY3OUndrzBfkJuMd+9p:VJksDgLnj7a","tlshash":"49c5959635a1b55e01878b313a4e56fa58bfc505c6cba04df88cadacf0ecea3255c7c1","dom_hash":"domhash3510a583cc183b781043b4744a117d73","first_seen":"2026-10-03T19:59:07.35346Z","last_seen":"2026-10-03T19:59:07.35346Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"worldcheckgroup.online/","fqdn":"worldcheckgroup.online","domain":"worldcheckgroup.online","tld":"online"},"ip":{"addr":"46.29.26.38","port":0,"asn":132359,"as":"M/S ROBI TRADERS","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T19:58:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"worldcheckgroup.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"worldcheckgroup.online","ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-08-28","domain_rank":0,"first_seen":"2026-10-03T19:57:43.907862Z","last_seen":"2026-10-03T19:57:43.907862Z","alert_count":2,"request_count":2,"received_data":2257474,"sent_data":1418,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"worldcheckgroup.online/","fqdn":"worldcheckgroup.online","domain":"worldcheckgroup.online","tld":"online"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T19:57:31.368Z","timestamp":1791057451368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldcheckgroup.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:33:02 GMT","end":"Thu, 26 Nov 2026 20:33:01 GMT"},"fingerprint":{"sha1":"F4:10:8F:6E:B6:FA:76:8C:57:1B:CC:1B:11:34:E1:F7:50:07:F7:F0","sha256":"33:CC:BF:19:FD:B6:23:1A:86:BF:BA:06:07:BB:4E:CB:7A:62:F0:A6:7F:46:A7:14:F4:50:E3:47:F4:2B:E2:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worldcheckgroup.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 665751\r\ncache-control: no-store\r\nx-edge-action: captcha\r\nset-cookie: sil_ses=93b457942e18479fcf6e7ec034e6a900; Path=/; Domain=worldcheckgroup.online; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=93b457942e18479fcf6e7ec034e6a900; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg; Path=/; Domain=worldcheckgroup.online; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Oct 2026 19:57:32 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"sil_ses","value":"93b457942e18479fcf6e7ec034e6a900","quoted":false,"path":"/","domain":"worldcheckgroup.online","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_ses=93b457942e18479fcf6e7ec034e6a900; Path=/; Domain=worldcheckgroup.online; Max-Age=86400; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_ses","value":"93b457942e18479fcf6e7ec034e6a900","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_ses=93b457942e18479fcf6e7ec034e6a900; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned"},{"name":"sil_gate","value":"ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg","quoted":false,"path":"/","domain":"worldcheckgroup.online","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"sil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg; Path=/; Domain=worldcheckgroup.online; Max-Age=600; HttpOnly; Secure; SameSite=None"},{"name":"__Host-sil_gate","value":"ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg","quoted":false,"path":"/","max_age":600,"secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Host-sil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2256300,"size_decoded":666736,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49408)","md5":"9917aac8f8b1f2038922017e7242af29","sha1":"c0b05154301b49d81b466de2689f03db575a7934","sha256":"a9a5c248fd6015f7cc193e3beb37a5875fc9418b273da72948e2ada3110e445f","sha512":"c72144dda6c656740f96a90eef140e3c6e6e70c5fc7eee768deff54c59e074e95d3d037acf344749ec504e4a516755656b1d90ea6687a8721929852c3d0106ea","ssdeep":"12288:cCZzn+V1LIe83LyBFRmc9mRfHfyxY3OUndrzBfkJuMd+94SiODhHq8URhu9cGUJ/:8","tlshash":"822502963591f6ae008787313a8a56fa58bfc505c6cba449f88c5dacf0dcea3359c7c1","first_seen":"2026-10-03T19:59:07.361332Z","last_seen":"2026-10-03T19:59:07.361332Z","times_seen":1,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":216,"connect":15,"send":0,"wait":552,"receive":68,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"worldcheckgroup.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldcheckgroup.online/.rt/ce","fqdn":"worldcheckgroup.online","domain":"worldcheckgroup.online","tld":"online"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://worldcheckgroup.online/","date":"2026-10-03T19:57:32.581Z","timestamp":1791057452581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldcheckgroup.online","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Aug 2026 20:33:02 GMT","end":"Thu, 26 Nov 2026 20:33:01 GMT"},"fingerprint":{"sha1":"F4:10:8F:6E:B6:FA:76:8C:57:1B:CC:1B:11:34:E1:F7:50:07:F7:F0","sha256":"33:CC:BF:19:FD:B6:23:1A:86:BF:BA:06:07:BB:4E:CB:7A:62:F0:A6:7F:46:A7:14:F4:50:E3:47:F4:2B:E2:CF"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: worldcheckgroup.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://worldcheckgroup.online/\r\nContent-Length: 138\r\nOrigin: https://worldcheckgroup.online\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=93b457942e18479fcf6e7ec034e6a900; __Host-sil_ses=93b457942e18479fcf6e7ec034e6a900; sil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg; __Host-sil_gate=ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"sil_ses","value":"93b457942e18479fcf6e7ec034e6a900"},{"name":"__Host-sil_ses","value":"93b457942e18479fcf6e7ec034e6a900"},{"name":"sil_gate","value":"ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg"},{"name":"__Host-sil_gate","value":"ASA5M2I0NTc5NDJlMTg0NzlmY2Y2ZTdlYzAzNGU2YTkwMAGIgousDaeo3xw5N6Q1.dQGbk83T2UAXC5qekLWyxnkcZVQoW2yueo1XQuC1FQs5jSNROnAqkE5ZRQRgxbOOKWEmEfMMSW0zIPBQDYhKAg"}],"method":"POST","post_data":{"size":138,"data":"{\"p\":\"init\",\"cid\":\"833b97bd9f03d3deb8c82225997b190400799a6dd960fa75afab747af25d54cd\",\"kind\":\"click_shape\",\"subtle\":true,\"t\":1791057452579}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1791057452-WC16Dfs6TKWHFYsFmq19yLkb2pvJhPX1\r\ndate: Sat, 03 Oct 2026 19:57:32 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":1254,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-06T08:40:58.537568Z","times_seen":18880122,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"worldcheckgroup.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}