{"report_id":"49dda487-079d-46d7-9885-dc7e172f148b","version":6,"status":"done","tags":[],"date":"2026-05-14T18:26:03Z","url":{"schema":"http","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"104.21.68.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"title":"UPS: Manage Your Delivery","dom":{"size":71441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60543)","md5":"2d6501232071389caca85523a77a2bfb","sha1":"4a9b913815170915e0f6adddb4369108aaac7f89","sha256":"1178aa6a559cd73f8ef16d8fee5d49f7f2d3567f66ac688a426b7d24260ae584","sha512":"b6b453142fd6ea1748e9b7f3bec0f53f50703757a6ce7c8e6fb65423983312f23eeb3d8151d9ec1624b53cbbc5b8468ac9ce734a0188cf81a3a7bcc6f4e980e9","ssdeep":"768:IqYFdVuzqJYyBTjBs4NCkcD+JrvMGxThkR0mIN9CywIACLRryhP+Dl+:F6xBTjBs4NrcD0lCo+","tlshash":"b263df8259178e3d892e2f6d8879bb181187d033c621fef8a17fde759bc28904c57da1","dom_hash":"domhasha4e0566850bbbc572a55c31f01fc1394","first_seen":"2026-05-14T18:26:12.466947Z","last_seen":"2026-05-14T18:26:12.466947Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"104.21.68.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T18:26:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"e-worldreship.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-21","domain_rank":0,"first_seen":"2026-05-14T15:34:22.349013Z","last_seen":"2026-05-14T15:34:22.349013Z","alert_count":372,"request_count":62,"received_data":1686815,"sent_data":35395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-10T09:50:09.27541Z","times_seen":219395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/712-81e145a3ec635004.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca3b21981471dc3cc0a30d0649741bd0","sha1":"6b5c84dd0e0a06c64dacaa2c8dafbeecd629e7f7","sha256":"3d1fa35f2cd388ca1b9c5e6244f2e4197db24f325fd74b216be13fe1a1b7decf","sha512":"d93d3d3620ea3a41ec4f1490c6d2c72003216b3732d095dc07959a33f18345185e4423c41af878424c9a0a722586ae709dfb9d32eac2a7126c4171c04e6ddbca","ssdeep":"1536:iJQa8dFwcZuEihaGgatEsSwIaJhJ8ybaL8IhlTqhOmLoJJXzCo6otga+:iGpEa83SYPaopL+zZ6otga+","tlshash":"8aa3f99573517162c7cb9059c4bf4b42b33b59d8340a802cf67de9cb282099a61fbf7a","size":104587,"data":"","first_seen":"2026-05-14T15:34:33.252597Z","last_seen":"2026-05-14T18:26:12.511142Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/125-c58f6bf7028403c3.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c717538e8445ca2c648a53657cdd724","sha1":"4bc586f3c97e416655568a50ea331bad2d61c705","sha256":"3d993e422f4de29c4f9149ce298be9546fe9196de37cf09404eb0b9982719197","sha512":"11fdab1e8c275ae58021738ecde4d6acf6cf8683a5ef19637eaabfc84b8fb7950f5229355202335257f39ceeb99bc30b43ead26855ac11181e0649dd50d1eff4","ssdeep":"768:VKlNZAAQCi/KAq8QAymPcG7hbpg1hYvLhmUcoPuZf/1QqHbhTDuLsU:MjZApXg30h9sSc79Qq7h3uLt","tlshash":"9143f8c577a2b02243d761e9445b040bf27dda2a984c046cf251e8f728b598996fff78","size":58997,"data":"","first_seen":"2026-05-14T15:34:33.208965Z","last_seen":"2026-05-14T18:26:12.482987Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/214-82248a1c279ed2a7.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b60f80f2673dc6734b8af17a7d751ac1","sha1":"f0b5c382280c80c8398155aadb5b1d44db82bcbc","sha256":"c9ba4fcd2e549b4be09397f5d540e8f1cef01a7be28564cf7fe3d1a45737f42a","sha512":"c81f4563da33f7de1586966c8cae0f309e574294e4f9146080244e9bb6b82e22319c44a06f0253aa41908c812269c4d37a83535dfe2f448d7f5c695cdb2c2a3e","ssdeep":"96:40zZd4DEBJWGgR8aAZBoB5ifRO7NgoJiCrtnbY0OsxyEE7uE/Op26nP9au3:j4DYJ/BoBVxgoJiClN63xh6Ig","tlshash":"b0d1d89d7182f2346e5b50d9c02f8161f735182a2d1d8850d1abce9e345accbb277d3e","size":6626,"data":"","first_seen":"2026-05-14T15:34:33.257242Z","last_seen":"2026-05-14T18:26:12.478818Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/webpack-cb4d3a3cb1c288c1.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc9de8d0caa0793eaa9a44d6c9a33352","sha1":"a75e3a17f781270acaea23d84648176ae9b6666f","sha256":"da943391a52d44c6f8736bb76406f04a212aa019e7d6615e024b7b2f7cded053","sha512":"44713811c8008cb7c07458fabd7a10a9252dccb42e0680ae89615623204999d5a60c4f006a2223572b345499061cb7952966f2b2657082b1f33ae09c5b29043f","ssdeep":"","tlshash":"6561c6a93625faf656f008c54c7ed551e6192037061aecf0e70bdcbdb4689e10562fb3","size":3292,"data":"","first_seen":"2026-05-14T15:34:33.180427Z","last_seen":"2026-05-14T18:26:12.476533Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/not-found-351adfdcade17e4f.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a67100765b08818b2a5b0b6173d16516","sha1":"a8bf200ae9501dbc2ab31c6949de1f287a8406db","sha256":"ccf2a3272be05193365201cb5ca0de246d89ead5844b2aea6fa1532bb78330f0","sha512":"bdb18bd7a993cca4160bd5563afa69a6ed420e52152a6182387f66baccede1c18bd509958809d5ba1ba4c098f52cbcc43d2a186094d0f6c04b4e44a45f63a914","ssdeep":"","tlshash":"7d81b7eca77079acb52e0aeabb1ed80cb14a6e2cf77b4ce0d7a4145259420943621b54","size":4013,"data":"","first_seen":"2026-05-14T15:34:33.236648Z","last_seen":"2026-05-14T18:26:12.559076Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/global-error-9efccbb28ada396e.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9a3c818a6edb03fb77f33708db0542b","sha1":"caabf340beab447e0508ace44dced2c1e5b4e73f","sha256":"e63d406c710f930ad950d6d65f9861c11d94a1c4278e82ae4501b0f2938731a1","sha512":"ecb6cfa6087f506ffbcd8651e7d2706a9eb7efde3cc3f7739423d109c02c3d55c1e224977a9b20b33f4319668f74dabe529100d0ad21e141b2c404390c4131c4","ssdeep":"","tlshash":"a84164857190eeace16f04dc546fc00d712b3e2dd62ea864b7bc3ca118871ccb163b59","size":2423,"data":"","first_seen":"2026-05-14T15:34:33.185096Z","last_seen":"2026-05-14T18:26:12.536888Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/619-9168df9c2a29b74b.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1fd1da53ea226a02cbf1ceb1d3a3177","sha1":"f98fe160ef9abeccc8c1869bea2a183db34421c5","sha256":"d29b3cee8caf82dcf98b8b3fa64b74c18ddbd188eb535a883f02e0987a923abd","sha512":"6c8a81988b0fff648be482b8ad8d97543e58c2ff372b3073038133afcd8d8d26f547870cde1ca0444b04bf7b6fcc65ac22882fe2c081f79d09983c6504a3eabe","ssdeep":"192:rYOHCx4wMcGWgSaxTPKnMeoBqSgZc2c3GbjqSkT:rjiGwMcGWuTP8MFmorH","tlshash":"b2f1d9dab1e1f8e2836b1190443b100bf27e5db1181e9194f7a95ce6f9b042c91b2fa9","size":7788,"data":"","first_seen":"2025-08-26T07:16:05.930831Z","last_seen":"2026-08-10T05:19:36.991991Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/911-4f5cba4381200ac3.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8e87cd185e4eb20be78f06d5e5eb6ee","sha1":"101f440142065821e3b41c6590d61c8f7ef332c2","sha256":"8182de8529e6f3ce9a61c19428d5062fdc5303d45d608cd2a3bc4d917b9d653c","sha512":"4d029c9927cf6407f7bb3211232e54813eedc6433b423482f4b35ecb7b0c630a5ba70c0578c22cf9641b817ab8898d5ab0d953b805805ab2f2b299eccad28c8a","ssdeep":"6144:MxdX0OdV1Ep/fON4Ze5nFumPlrkwS93QjCsSdXWn6vEh9CWiNOvweDjFY4:MDzV2pM5lrkSCFdXWn6Mh9CWiNOvwe24","tlshash":"0e745c1ea5e4047f478643e5f00d7b4eb3f8c977898da235896acc7a16d1cb4e236a34","size":351687,"data":"","first_seen":"2026-05-14T15:34:33.263732Z","last_seen":"2026-05-14T18:26:12.580874Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c69fe83b09a22fe476615ac870e2f2b","sha1":"0e8e08b839f98441eb6d1cd57ef9050825c7cf73","sha256":"bdfac094c20afc4b241407d0cf5a5a82ce9e4727f9c35b4125d9e01f80dd9df7","sha512":"923f214f9ccfa7687abf969ed8f4c71d3025d161a01a86bf35e983873fad97346a465549aed8c93b38f2c40b388f357b35a292dc4a1c58286e7fdd6d656b3372","ssdeep":"","tlshash":"fc41361e7100fa14bdb3cd5b88bb4f66885cde374138f4a8a95edc3f406197b5368856","size":2260,"data":"","first_seen":"2026-05-14T15:34:33.259461Z","last_seen":"2026-05-14T18:26:12.583523Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/details/page-ef97e3da1181d968.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13801f9f8e273b508404936d6cefe1a1","sha1":"4eefcbd34b0be9945f66c10cf066642399640fbf","sha256":"b3a3e2136969dfaff0be2c111b04627fc753f469cdd1177d971aa693be1040e8","sha512":"79b2d87be61dbd9f4182976dffd5814a89baed6cf305038077bb20bf2aebed792f7766a2854f7ead68bdda6f4d50e9a4966d7109c623d855928152ebfa5a5815","ssdeep":"768:0cBxwI3qyIuGPk+gqjFDKPU39kzVoLcShw:0c753qyIuGP5kuw","tlshash":"a1c27391e356bfecf53705d4951e900c612e2f48cb2e8c65f8b8b8221a848d57b27bdc","size":25942,"data":"","first_seen":"2026-05-14T15:34:33.194906Z","last_seen":"2026-05-14T18:26:12.52754Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17a5c310c0221dcb75873d80c7827d8c","sha1":"4751a94426636922e7356ddcbaa72915c717e3f9","sha256":"5f669527cb558d85647a195d9ce9ebf985018574a05c864fa9580197fa09a751","sha512":"a22fa7261d4cc6cc69193be02c2e18a4d7a0de55e20f6362983b5eddf7eed63204e896d2856afaaf4176072e37f224ac744588715c106c5c0b17c7ca4f40e2af","ssdeep":"","tlshash":"93012548f04bfc95bc62dd0f20364d759098de7951b654d463cecd9745a2479074c9cf","size":697,"data":"","first_seen":"2026-05-14T15:34:33.261187Z","last_seen":"2026-05-14T18:26:12.586428Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3decbbf2712f5a0c14ba16408386091","sha1":"8f31b3cb3cadda6ec46f5cd812c33c15b7d7f90c","sha256":"14e08dbb2519a3f0747a6d86afd8fca9546b344f8e3975f4ace6a93ae974fcb0","sha512":"1d8ec8e0ce27985c75b32c0af4bc2d25f8e9997e76c5b09c37a5b2e8cd1a50f375f31c779c919d0fb2467aab70b90114fd0203788237529ecc7449baee48634d","ssdeep":"96:LFhf+UmaUlFa8p1n1DKwrw98qw81w7w5w+TQHU3:fOaUlpE203mWI+","tlshash":"bca198297106cd5eed5a3e59113eac3a14ccc77b4aa4dfb8c2e8de2446868397bc1dc0","size":4651,"data":"","first_seen":"2026-05-14T15:34:33.262459Z","last_seen":"2026-05-14T18:26:12.588123Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/delivery/page-09b466a5be35d65c.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b9752e7500e5ab33b9ae602bb5e838","sha1":"8a7959d96645618b05fa7dbc577180fab217b49d","sha256":"f0ed5f0057620edc7454710cbf2375911f7857c2e01649593740a822e681b2af","sha512":"a5a536ddfb7ba03e6b529ca467ffda761ce0f2d4ca6e5c54aaf2c6422ce07deab73410d0f24fb9b953e3145ea820959069a311e97e94d1b13f980061f431a250","ssdeep":"384:nxeqHS6bezhhRG+kxOZcQoG0GliRx9EbZ4hhas4qXdWeerg1UIW9P6vgkzYrsr:nA6qdHGnxOZcQTPlYxabZ4hhF4+dxer0","tlshash":"3da27485e386bf9cb63b04d4991fa00ca22e1f94cb2e48b5f5f874211a444d97a73bdd","size":21371,"data":"","first_seen":"2026-05-14T15:34:33.217731Z","last_seen":"2026-05-14T18:26:12.495977Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/payment/page-9d624d0d70e0d393.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a6c91043ed2298dd864ba3be8d936e4","sha1":"41aa32a39aaffc8c28b83001dca027df2a2fd9ef","sha256":"4898817bc5da74cb59567969e037cacf34e5d40be889df422a9a76e22c1fbe75","sha512":"dcebc2aee4c37cbfa25b2fe154c1c5d88953a23f233f15bc7b6b92f9226d9123f1b3838bf4b7b338f698f13a0db9a2503208cd725e026b13b00fd2e8b426937d","ssdeep":"768:2Ck3yGuF9CLROgAnUnMkDTqvcJ5h5UNJx7H0fW4mEB0zlnX47v/dSAolpPY18R1T:2CJFTDn4DuvI5hobln6v+qu1","tlshash":"1c43a505e056bfbdb96a059c646e812c732e1f44ca0a4c39f4f8bc351a458e47b5bbcd","size":55525,"data":"","first_seen":"2026-05-14T15:34:33.178708Z","last_seen":"2026-05-14T18:26:12.479746Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/4bd1b696-21f374d1156f834a.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33267ce03293bb55280e3ea185e6a69c","sha1":"7d464409e95b29aa2e89a2cff503ddc587b58ba1","sha256":"8f17e846e16070e07820ac8c0a9f74cd7027b5ae688ee928e2fbf822582e0260","sha512":"da369f64bf1b2019983c778a351a09af3a4e069d95c9526f27daa6d781ea304291a86134f24f322bf7bfa7b275c02c61bb0f50201fe8e295e4502a67c0592c67","ssdeep":"1536:FWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:79LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"a6f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173019,"data":"","first_seen":"2025-09-15T10:43:19.862472Z","last_seen":"2026-08-10T00:04:25.186543Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/255-fab74d2b82b62d0b.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a41bd3c910b1b0ed40642ee29c0e1652","sha1":"885ebaf58956b016bdbbf815c0da709ab9371f7a","sha256":"a64238272837ff56420c17ac86603c682826779a00a30b2eae06206c072626d3","sha512":"31b545b1cae1a2082059763b1de665bd9db49c7454be8541949e082137d2839e70c596395a441e1ba48315c064dd19fb6c676caa7d2e5de4a1e3c658c05a0cc4","ssdeep":"1536:Ch7TN3Izz+cHr4U5eHM0dhd7GcyBPo7eUq0MEeiTtaocZXxreXRNIrky/SQhuzQP:8TN3UrjJ0BEw15A4RN0z/SQuLi","tlshash":"aaf3dab676d0f8e107a780d5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","size":172044,"data":"","first_seen":"2026-05-14T15:34:33.248739Z","last_seen":"2026-05-14T18:26:12.540117Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8afcb6eddb3445bd548549b72ff844","sha1":"b8d618412912d76e21b58a10804a3c732f2bde4d","sha256":"3d6f3712674ae3b1aed160e028b177d34de2edca1a4b2bf2762581573ef84e4e","sha512":"f0e9109310d17a58e2847f9605f29ff6f5aa18a36c159b3e00418cadcc3dbb04040174169ba3a190df441c8d6418111e8a329e646c02ddff2011a93e2d0f5e57","ssdeep":"","tlshash":"ceb01278e011fea114b620726139f0c6325f504d196410601223a28c02443182703fc0","size":91,"data":"","first_seen":"2025-08-19T15:40:34.902526Z","last_seen":"2026-08-09T22:56:11.351612Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74e5c52ea872a1ca52cb86edec43e261","sha1":"1e944558c922d1582627c0d9096cb712e2d0d733","sha256":"1f2e0dab6afd79cc66cc6ec34889edaab14024abf60d3b0fc28bc331a63a12db","sha512":"08022a5d5a46627f09446c8076b29356bdc66e6123f8086caa0021956721b662c2d8cb86579e2264b4c1544450d15979fa467892b0db5977b17f5c43da6bace1","ssdeep":"","tlshash":"b8d02ea0ec22dc19c7a74f29183f1c3921ccc2711309620ae885c93859c6a380aa0e86","size":260,"data":"","first_seen":"2026-05-14T15:34:33.265757Z","last_seen":"2026-05-14T18:26:12.592028Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/586-0582beeb715a626a.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6770fa9f9a926824a5763fc0c963be57","sha1":"9cd2e11d8864246bac4ea0146e211ee6571c4223","sha256":"32749daf8658150a7c072d14abe5d19780ad50dc51374301ce95977a515766fb","sha512":"c8f342183692ae838cf4cb337fbcaa0da34769aa12326e1276a49b963fe34252605f2e0b8352d1005b224b31465b03467e0d80c99466415e8fb9190944942f67","ssdeep":"1536:Q2i+bAnGoMb4MMbqw+bGlFbhBdeMelKPR5Y//VtMjCfGOUC90px4pxypqRqJ5bs9:Q2i0AnX4M9PR5Y//VtVxypqRqJkfEFMD","tlshash":"4783e7ca33a6b1154bad51d720b94003e3a9be5c151d40a8f6aa64df7b9cc85f2b3f34","size":87887,"data":"","first_seen":"2026-05-14T15:34:33.230807Z","last_seen":"2026-05-14T18:26:12.514113Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/657-b961742bb90989ff.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6c592f7531c9e9c03ddd4f2eb1cd77b","sha1":"c3fad5b584e4d0ed244e93b5838ed4344e5841f9","sha256":"cf29279efe06610c0d65c8dc1fc314b14793fdf63b523f1e153e56bb35c08fc7","sha512":"a1f50625657aaa8e55ec15868dc1998bdbf96293e9c140de0fb87c8bdccca462ccafaf955150598ae6f12f9b07fb847855c1967d0bb5578ab2de6bab46168c37","ssdeep":"192:4hbYADyps8W3A4O0PZhRkGKJSRNzzX0/v:akADx82A4fP7OlSLzzXA","tlshash":"af02b73db2823058936e40fc5a5fc1d8666db446599ccc6bc2fb2a914434e6cfaf2f64","size":8904,"data":"","first_seen":"2026-05-14T15:34:33.203949Z","last_seen":"2026-05-14T18:26:12.506266Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e51ba8b92e9e0e27898c5c50f4f6f15b","sha1":"109ebc086a265cc24c0ded86ce235d3c991f6932","sha256":"4755b9e5f417c72bdb6bf39a2be160233cf214f384a2143735e6deffa3a8366f","sha512":"e0e2d0f41f82446d441504a096794c42b627a48c4113549e9d462d70a6dcdbcf91fedd30f120693e14f13ddfd59fca85642adc34cbe1108653c1157ae13ce4b7","ssdeep":"","tlshash":"5f9002a0d5890d559032156354241c4543d8d41c11444d8012a561d95061d69a549d4d","size":53,"data":"","first_seen":"2025-09-11T05:10:43.312749Z","last_seen":"2026-08-10T09:51:59.205651Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f747c5f122af2bd070a6a36e3c6037f6","sha1":"c4522dda081cd70740b66dc4580a612eb3a3ce00","sha256":"288caf11b0ad092c81b5e084303bc32ef245011f86227f9c5022405461c7e649","sha512":"8351d6046f587a8f66e011c94e40097292fbb082bfa464f020366b4bad44fa380d03b856f96cb9bba2d54300e58afb5c78eb27d7fab927ac6a3473353035dfa6","ssdeep":"","tlshash":"0c719fe6fd16ed0acbc69d08287e3cb410cdc3e25296a26be198c874c5e7d3059f1662","size":3712,"data":"","first_seen":"2026-05-14T15:34:33.268662Z","last_seen":"2026-05-14T18:26:12.596343Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/page-0de1e55766cb017f.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df6dec8080987c8e743911f5141e4d26","sha1":"08067cc896b5bd2e74cd4bc336ec00980d5ce132","sha256":"c5922e5047ef7bf7ee1fbb86b81a5e6ddae8049c3f4695172988479b4d1c7286","sha512":"5932f0588e8fd46012413707925d472fe123d7c7034373ba2fb5a91a87c2051f67dd77c44a8a0105306476deab1f461ecba0f8e5692529255d7c3715a6efdaf8","ssdeep":"384:ucTRIoWFdp4DdIzKGVnl+VbqETZlTv3GdSbhs+eKxX6NTCTpT3:xRNYdp72Gtl+VbqaZlTEaleKxak53","tlshash":"dfa2e859f6a7bbadfa6610ace0af400cb13e1f55ed0e0810fab47c521518de5ba13f58","size":23205,"data":"","first_seen":"2026-05-14T15:34:33.210296Z","last_seen":"2026-05-14T18:26:12.50069Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/247-65eb83b1f4793ed8.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c3fde374febe51f737bc68a02de5ee1","sha1":"c2072784f8939d941c2697f9897f84cb41451f4c","sha256":"8149194e19c64f8c4ef1c8a03a4c8ed8de4bc200d220d570f4274b661dac72cc","sha512":"515bf022cee37f76cdc8b7f06d8269b52570f3fb63237de8584ebc2cb70dce1d34b38ab62161619368f122b07869370ecdfbb9b8015d81b8835c4cadde121c1f","ssdeep":"384:xD0fqC44wuKfjay+rRMEueLIuPlCeMAaYXR/bUAHguWCaC7S7D883+W6r2r2YkW:L0E80+drIn","tlshash":"205289984411ba6bf12590423d00038ffbea9e84f457f4827bb6dd4947a14e1edd2bf6","size":14301,"data":"","first_seen":"2026-05-14T15:34:33.190328Z","last_seen":"2026-05-14T18:26:12.48428Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/412-16a6f945fa61c2ea.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02c97fa0e889fb0edb72ea61a47f42cb","sha1":"0b98a5d97109894b0ae58190d640b970aef3e796","sha256":"3b5bf3ba957451d2eb9180b16ba35bf6e14a09eab6c329aae9868b77d190a02f","sha512":"56cfe60b3e8c6b0bd4d2c2141bc72cad65994127dd1e0b45df70687e041e907637490baa53b0538b7686d4673465bbda2eaf51d9d8361d5fa98d9f269d3062af","ssdeep":"192:BXX/ee+TdtutfTI2Ba9xHP7MACLRe69KzcW7oSaJS:lPKupTI2w9xHP7MACLRek5lA","tlshash":"c912985492617facb12b068cb91e951cb15f2a58d71b4c74fbbcac332b450d47a52bcc","size":9708,"data":"","first_seen":"2026-05-14T15:34:33.181531Z","last_seen":"2026-05-14T18:26:12.475429Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/main-app-ed21d86334bed8f0.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81aeba7cf5ae489b790f874bfa2a7398","sha1":"e792c4e3b92f3308adb8ff49d4cf3484c998823f","sha256":"937a654f94014d18dfae6fe43460cfebc2e682e38e79fd4e304bde3dfc013ae6","sha512":"f927ddab1f96b8eb7ad27471768c1bdf1fcbd283ac9ff0cfb8332294026f4a2c8b65c77cf182757e78ff84b1c20a69b14410d15b162fe24fb43065c4a9b6c007","ssdeep":"","tlshash":"bdf0195a4f0cf41f5c16ad60fd976ce2185f4179302b4d656910ee613c23b6cd260409","size":513,"data":"","first_seen":"2026-05-14T15:34:33.228005Z","last_seen":"2026-05-14T18:26:12.530379Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/loading-0a03b936fb2edc58.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8d9d051811091ad19b657ae96f21558","sha1":"14e2ab3967790a90442e2ac2dbbc979a282da917","sha256":"223b70c99e20735b5c1c7c0885a5041fe4e5024e6f00834d1454c64be495fcfd","sha512":"0c2b0df75d6961e211d15fa77c7b2a2323324838075a592c6d4e5984aaec98440140e8d4fcfc65e9dd38404593712ffadac5f9dbc4ddf6134819de0ae943cfd3","ssdeep":"","tlshash":"a5f0c0c415477f2cbe260c9cb5ee5804305a5c6268ce84943b665d2205a69b4d231ea4","size":519,"data":"","first_seen":"2026-05-14T15:34:33.17396Z","last_seen":"2026-05-14T18:26:12.534612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/887-7fcf33dd54ee5f53.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b92cee0bdb7990bcbaac347c24c64c","sha1":"e6858f2b4c7f25a1e2a2c1d3f772ddd92f47fde9","sha256":"3e2ad93ceecfbb5ecba8b6c5026770e862e96dc3d4498c2827194a283377d562","sha512":"c060e5bb2b8801be80f7a2b82438c19cf7329e9202468eb75c7004be90095e6de9c01595d0ce701ed0fe637e1c859022c51e4fbe0ca263ccf4989437a8061d3e","ssdeep":"192:vL9Tr7Cx/zOG3uotdngX2XFu8j3Zl4ZGj2FlstVqAMS6:vL9cCnmk8j3D4Zk23stcAMS6","tlshash":"96e10af6778afc388666c58888379181e5950a76240f6480d7fe8cfd6255fc988f2fc9","size":6813,"data":"","first_seen":"2026-05-14T15:34:33.213499Z","last_seen":"2026-05-14T18:26:12.5331Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/error-5c4d2c730b2746d4.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96205478db657763e6c87c4fb62db52f","sha1":"f3d094d42473fd99a25e3b070ff0740e70163642","sha256":"899411e57c0a5a23f70fc566e486a3e0fdf4bdbaba1e1001322343c2c2d4ffe8","sha512":"42e0845e2d449bc400c083e990961ca8a63c15c70addf34dc3055bcde86d01e939cdcf62ed0532aa5ededece6f25fa42853cb3af2fe62b2ad78c34d78e70ce24","ssdeep":"96:55gFXyzye+TdqclutbJJTZ2+iWJNUTckHssV/6:55MXyee+TdtutfTZ2+iWyfh6","tlshash":"7491c8d923707dbcf16e09997a1e984cf14a7a2ce72f4ca097f9186359c30947925b40","size":4373,"data":"","first_seen":"2026-05-14T15:34:33.177398Z","last_seen":"2026-05-14T18:26:12.487466Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/239-f829c5ef5d29f645.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"614375c49c653c0e375394ff84e75af3","sha1":"d28e212ccedfed6aa1041f09c4556a2022dbcf83","sha256":"e836062cafa1c6e8a4d28b986e0969e5bf91d8ec2b7c6108069731bd9a5dacbd","sha512":"301b134efb2bd7eaa9a9904e976f6c6a965c7d3a9c9ece4bf5c98214d302d92fe14e0fe831394fbd14d7902245d92d97798e8d1dfe430d3afdbffada18e8edbc","ssdeep":"192:xC4aLHvgeIAx+d8rGNQJ5oaWA3L2BV9wrdbdGJ2uD8avnB+GRFVYLJKi3ZuP0ww:o42HvFj4WrG4KaW6cV2z0D5BNCz3I0L","tlshash":"6b620a723695fce6639bc091c87f000df3756d71623ab08473ea9cc9a9a0584b0a2f77","size":14969,"data":"","first_seen":"2026-05-14T15:34:33.251379Z","last_seen":"2026-05-14T18:26:12.486058Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b80efe695ce4a0b6c857ff46f5536c9","sha1":"ac6f6609ee54c5d73829c751d4448ed8dca034ec","sha256":"d086bfbd017c35a43e2e3d8a269490eb9f844df11864ad395ef74d92f9bdc1b2","sha512":"51f64096051c577ae2ed887f0163fd3603e59dcd8a6558f3df9136679e28ae0d9732636009910b67502b8670d0feb98ff575ae22dffbfc897354aa079dc4c3f2","ssdeep":"","tlshash":"a9900470d0440c575073001317fc7501555cd04c04014d401f51544f54111557715d45","size":46,"data":"","first_seen":"2025-10-01T05:30:01.619736Z","last_seen":"2026-08-09T22:56:11.354406Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/layout-8ba93b7956076135.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbf4fe73ce8517413dc470d94466396d","sha1":"1534f33a97429261a5394939fcd21e8e02c8a2a8","sha256":"262e722c8af1a189dd67d3de2717f67fea502f54540907e802c2505986c7535f","sha512":"cfbbd8c51d143294d63b357023eace438474af60d0c77c9a54ff75bcb5253beeedce8cf4f73e31066562ba3012c3babb38871fc4633dc2c5e04a69ea8a40ff2c","ssdeep":"768:T7O8N2tZZOvdjC7BO92i6dy3Yd5zBxJdH9l49ilxA3Ge5Lq:TWrw6/b3JKi/A3Gedq","tlshash":"a513f9e5f356ea78a5a500f5d06f1108e23f2f94aa4a4420f6bc7c651a2cdc1b362fdd","size":45467,"data":"","first_seen":"2026-05-14T15:34:33.191827Z","last_seen":"2026-05-14T18:26:12.515791Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/css/6d97b1d5bf8cd277.css","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/css/6d97b1d5bf8cd277.css HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"20d64-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWDD3ffKn2SbUPGod8CgInqgEKnCjAACc6WitXJ0RAGlyC1rGkVA9ee4ZAXv84ESonDP8wVCL%2B05D1LYp204Xnp5cyb%2Ft5FWiWqP1VJJ7Q5mRfgqQ35C5sfxU3UpbfkOvV%2FRKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd140b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134500,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63243)","md5":"b6a40df5f8015085f8671441e47237e1","sha1":"edf5b30fcf4874639ed7bf473e3ed00e0842c98d","sha256":"a095be2e19e142281dceec55d33cee97fe574158f658e2cb554a0bcf4937472e","sha512":"4394bfb414d3c0673fd537e2d8b3c721e4d894b43cc5fa529ff8ab31a4ea58e7a8bd71ca96f8c9c43aa4652fddeff6769fa49bfe1048f5fd4da4b9faf3dc549f","ssdeep":"3072:GnfMNxD2GF+XTKhXSoYQFAvl2KaH0JGFutWa:GnfMNxD2GF+XTKhXSoYQFAvl2KJJGO","tlshash":"dfd3c828a644143f7c17d5f9e194f99ea127f1c1ee3756dafd9222408be22fb2d63600","first_seen":"2026-05-14T15:34:33.20682Z","last_seen":"2026-05-14T18:26:12.468521Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/1e41be92c43b3255-s.p.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/1e41be92c43b3255-s.p.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://e-worldreship.com/_next/static/css/3e226b40f5bf5b9c.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37520\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"9290-19db29d6d33\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTdpHj5r8Vri4gFerjeGrdgB81%2BANzv2f9mArsgoGnnVU%2FM%2FPcQ%2BQ3cXeDGSX36oG5R3oQd4PqfoxqJ56TRBlkqcg30n0jl2L6bfJFnjSCl9rEYaj0uOFUl4CNQq%2FgEG6eL8yQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25fbe320b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"b7627e3c9663757d70121f2ad4c8d986","sha1":"75be45f9d2d223ca9db09fc4fb29a14470f55f5d","sha256":"0a44e0bb6ba5c8537e8814c148ef7755f1bce12112361231f595ecc584a18d7a","sha512":"aacea6ee9d9b0eccc1670d80af09ef95f38e2bb098f0b8ecb40b794cd98b3909936e2116d6ff6561eac50608f621a2601ef320a23f5ead6f83181425957acd44","ssdeep":"768:7cfHxGPymCMqGpofV0K4bLO1uCzRPzTWprI8yrwkXrV9cBR8yFySNyi0:QZMPytYbnCzlqpr+59YFy1i0","tlshash":"e4f2f1180e54674f4aa9aaca029c74aae576a05b8743d077335c9bc8fee24b1437f1d4","first_seen":"2026-02-20T03:33:20.618197Z","last_seen":"2026-08-10T09:46:40.960869Z","times_seen":7753,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/1a634e73dfeff02c-s.p.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/1a634e73dfeff02c-s.p.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24444\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"5f7c-19db29d6d33\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P7MupcLlyI6fDk0EwjAwQ5bZ2Inj66KQpc7A3g3h5QQZ6Dxfyjw7ZmgcMityd94DxxMuzSgsPgyL2CI0%2Fc8fNrJKN6kGI38WQJefXKrA8fNqmLIjsOsa3htVuHpbAuIAE8Arw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd0d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24444, version 1.0","md5":"536359ff0fc970eef8be299490b3eaff","sha1":"b052d8cadd993b0e15df9b373f11db11eb1c3fbf","sha256":"cdd53dc5576a79f35cf280dfbd9c1cb2a5dd2f0ede30afba9b9ccdc7fe12e7d0","sha512":"ed5dfd28b84247c2117639872e1947bf423d25c16b51987830dad9700bcac0a4c1863e30c88ae265e4bd20bdbcca97a2825c694ced9ff84e044c615aec799bf5","ssdeep":"384:t2M5mniWFq5ap4U1hPqTfn49jF+RHXfJYMH4ez96LqLMiJfguNtyeFBW3Y9cpfFQ:tFOJqo4esfn45FEHvsAJrNxLcWHpAo","tlshash":"c2b2e127a0496e5496312c7bacd0bf8a411c090d137dfd49398e677ecf9f46f62ab182","first_seen":"2026-02-22T13:04:32.24354Z","last_seen":"2026-08-10T09:46:41.047219Z","times_seen":448,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/412-16a6f945fa61c2ea.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/412-16a6f945fa61c2ea.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"25ec-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjUnf6IBFdmgp5MtNFwhrDjHK1jM4%2B6VJmnl5WVndmBb9uMk2h4CxDYsNMw5dTWYXenI8vySvzRVbtQFuYtAjKM3C8QiJXmugwnCt0jLKEnfMU2SDaPD%2Fvyp%2BRbGNVVxuRTNog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd490b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9708,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9684), with no line terminators","md5":"02c97fa0e889fb0edb72ea61a47f42cb","sha1":"0b98a5d97109894b0ae58190d640b970aef3e796","sha256":"3b5bf3ba957451d2eb9180b16ba35bf6e14a09eab6c329aae9868b77d190a02f","sha512":"56cfe60b3e8c6b0bd4d2c2141bc72cad65994127dd1e0b45df70687e041e907637490baa53b0538b7686d4673465bbda2eaf51d9d8361d5fa98d9f269d3062af","ssdeep":"192:BXX/ee+TdtutfTI2Ba9xHP7MACLRe69KzcW7oSaJS:lPKupTI2w9xHP7MACLRek5lA","tlshash":"c912985492617facb12b068cb91e951cb15f2a58d71b4c74fbbcac332b450d47a52bcc","first_seen":"2026-05-14T15:34:33.181531Z","last_seen":"2026-05-14T18:26:12.475429Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/webpack-cb4d3a3cb1c288c1.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/webpack-cb4d3a3cb1c288c1.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"cdc-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wv0XIxbFx9y4uVr6QTTt5gsQ3%2BRgKw9iBZLT3n00LzoJOIk34pb2lOBe57CJvj9JFCWtLSSnS2Iv8NfqDP8KI2rLWjyjd6KsxZVfDGCnrcrnfiLQwQgdj43ZzRX1p9kIc86Lig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd1b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3292,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3292), with no line terminators","md5":"dc9de8d0caa0793eaa9a44d6c9a33352","sha1":"a75e3a17f781270acaea23d84648176ae9b6666f","sha256":"da943391a52d44c6f8736bb76406f04a212aa019e7d6615e024b7b2f7cded053","sha512":"44713811c8008cb7c07458fabd7a10a9252dccb42e0680ae89615623204999d5a60c4f006a2223572b345499061cb7952966f2b2657082b1f33ae09c5b29043f","ssdeep":"","tlshash":"6561c6a93625faf656f008c54c7ed551e6192037061aecf0e70bdcbdb4689e10562fb3","first_seen":"2026-05-14T15:34:33.180427Z","last_seen":"2026-05-14T18:26:12.476533Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/214-82248a1c279ed2a7.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/214-82248a1c279ed2a7.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"19e2-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlPYw%2FWzygpObJctQEL5DYVxMaXR8jmPO1Xf2liZwYqT%2FQAA1bHKFBvV1yRk%2Fc0%2BKD3O4SDOuevlPur7QQzYkimfZ7qzv2%2FlJN5axt2OLIFwJxkYhA3yFv5DSIHcJLV7uV53JA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd290b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6626,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6626), with no line terminators","md5":"b60f80f2673dc6734b8af17a7d751ac1","sha1":"f0b5c382280c80c8398155aadb5b1d44db82bcbc","sha256":"c9ba4fcd2e549b4be09397f5d540e8f1cef01a7be28564cf7fe3d1a45737f42a","sha512":"c81f4563da33f7de1586966c8cae0f309e574294e4f9146080244e9bb6b82e22319c44a06f0253aa41908c812269c4d37a83535dfe2f448d7f5c695cdb2c2a3e","ssdeep":"96:40zZd4DEBJWGgR8aAZBoB5ifRO7NgoJiCrtnbY0OsxyEE7uE/Op26nP9au3:j4DYJ/BoBVxgoJiClN63xh6Ig","tlshash":"b0d1d89d7182f2346e5b50d9c02f8161f735182a2d1d8850d1abce9e345accbb277d3e","first_seen":"2026-05-14T15:34:33.257242Z","last_seen":"2026-05-14T18:26:12.478818Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/payment/page-9d624d0d70e0d393.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/payment/page-9d624d0d70e0d393.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"d8e5-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRvbkMXojJC0d3cXDUGlJ3JES2QdfFB59dR96fniBEnLbegMnmsi7C42RHBVkrUSmjAgEWzoXAUERTyW7fYh6QwR0vLGZXgyRssGgpY%2Fezj%2FppOvpovXCpaw6l27QHEKhPiwCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26949a90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55525,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55473), with no line terminators","md5":"7a6c91043ed2298dd864ba3be8d936e4","sha1":"41aa32a39aaffc8c28b83001dca027df2a2fd9ef","sha256":"4898817bc5da74cb59567969e037cacf34e5d40be889df422a9a76e22c1fbe75","sha512":"dcebc2aee4c37cbfa25b2fe154c1c5d88953a23f233f15bc7b6b92f9226d9123f1b3838bf4b7b338f698f13a0db9a2503208cd725e026b13b00fd2e8b426937d","ssdeep":"768:2Ck3yGuF9CLROgAnUnMkDTqvcJ5h5UNJx7H0fW4mEB0zlnX47v/dSAolpPY18R1T:2CJFTDn4DuvI5hobln6v+qu1","tlshash":"1c43a505e056bfbdb96a059c646e812c732e1f44ca0a4c39f4f8bc351a458e47b5bbcd","first_seen":"2026-05-14T15:34:33.178708Z","last_seen":"2026-05-14T18:26:12.479746Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/125-c58f6bf7028403c3.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/125-c58f6bf7028403c3.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"e675-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40iyWwFJbHJBxquWW5ggY5tDqArY6Jr6QwLswizXnMnE6oOMDsdVSebWXN4L5t4PsOO3bqpYbKv6CHqtGftqmr5wSQ3F7PVloVniL3HEbsZG5h3c0c6vXYN%2Fni4t4JKHqkDpqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd2c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58997,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58997), with no line terminators","md5":"7c717538e8445ca2c648a53657cdd724","sha1":"4bc586f3c97e416655568a50ea331bad2d61c705","sha256":"3d993e422f4de29c4f9149ce298be9546fe9196de37cf09404eb0b9982719197","sha512":"11fdab1e8c275ae58021738ecde4d6acf6cf8683a5ef19637eaabfc84b8fb7950f5229355202335257f39ceeb99bc30b43ead26855ac11181e0649dd50d1eff4","ssdeep":"768:VKlNZAAQCi/KAq8QAymPcG7hbpg1hYvLhmUcoPuZf/1QqHbhTDuLsU:MjZApXg30h9sSc79Qq7h3uLt","tlshash":"9143f8c577a2b02243d761e9445b040bf27dda2a984c046cf251e8f728b598996fff78","first_seen":"2026-05-14T15:34:33.208965Z","last_seen":"2026-05-14T18:26:12.482987Z","times_seen":3,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/247-65eb83b1f4793ed8.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/247-65eb83b1f4793ed8.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"37e3-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DM%2B6yTAm8QJR2N7qhph25BWC54c73hKpuu5N4c5nE9mlnspgbC4O%2FK5dxSNTU5A4%2FzYPAm7BLvqPRA6h6TBYTcT33kgYtZ1Rr8cWbiGtCCx%2BNJsLr4MarC6HU9LKHoasREwCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd350b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14307,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14203), with no line terminators","md5":"0c3fde374febe51f737bc68a02de5ee1","sha1":"c2072784f8939d941c2697f9897f84cb41451f4c","sha256":"8149194e19c64f8c4ef1c8a03a4c8ed8de4bc200d220d570f4274b661dac72cc","sha512":"515bf022cee37f76cdc8b7f06d8269b52570f3fb63237de8584ebc2cb70dce1d34b38ab62161619368f122b07869370ecdfbb9b8015d81b8835c4cadde121c1f","ssdeep":"384:xD0fqC44wuKfjay+rRMEueLIuPlCeMAaYXR/bUAHguWCaC7S7D883+W6r2r2YkW:L0E80+drIn","tlshash":"205289984411ba6bf12590423d00038ffbea9e84f457f4827bb6dd4947a14e1edd2bf6","first_seen":"2026-05-14T15:34:33.190328Z","last_seen":"2026-05-14T18:26:12.48428Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/239-f829c5ef5d29f645.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/239-f829c5ef5d29f645.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"3a79-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmJ1llRITWgqUXCmFxA93bge1VO6Zg5tTcCttVt7InhO20GFwyVoHkuzwEZBBPqMmY5odV7X5jv0SOal8Dtt2fJcXHt%2B4wNiQs7buvYttIk9m5fdli9nS4Q49N15OJ0ELSEpIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd430b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14969,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14969), with no line terminators","md5":"614375c49c653c0e375394ff84e75af3","sha1":"d28e212ccedfed6aa1041f09c4556a2022dbcf83","sha256":"e836062cafa1c6e8a4d28b986e0969e5bf91d8ec2b7c6108069731bd9a5dacbd","sha512":"301b134efb2bd7eaa9a9904e976f6c6a965c7d3a9c9ece4bf5c98214d302d92fe14e0fe831394fbd14d7902245d92d97798e8d1dfe430d3afdbffada18e8edbc","ssdeep":"192:xC4aLHvgeIAx+d8rGNQJ5oaWA3L2BV9wrdbdGJ2uD8avnB+GRFVYLJKi3ZuP0ww:o42HvFj4WrG4KaW6cV2z0D5BNCz3I0L","tlshash":"6b620a723695fce6639bc091c87f000df3756d71623ab08473ea9cc9a9a0584b0a2f77","first_seen":"2026-05-14T15:34:33.251379Z","last_seen":"2026-05-14T18:26:12.486058Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/error-5c4d2c730b2746d4.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/error-5c4d2c730b2746d4.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"1115-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIjgrpEo1DgLFSrYvNL7cvINqyBXiKJg9aW4ogeX%2FpcaB7bJjaFYd%2BwO2QFykbivGDCOEcVH4BHsARxpyMh76CLYihk2ZakofPF4iIbtei4Box3PBT%2FR64zK%2BNqqA0o58KdeVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd460b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4373,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4373), with no line terminators","md5":"96205478db657763e6c87c4fb62db52f","sha1":"f3d094d42473fd99a25e3b070ff0740e70163642","sha256":"899411e57c0a5a23f70fc566e486a3e0fdf4bdbaba1e1001322343c2c2d4ffe8","sha512":"42e0845e2d449bc400c083e990961ca8a63c15c70addf34dc3055bcde86d01e939cdcf62ed0532aa5ededece6f25fa42853cb3af2fe62b2ad78c34d78e70ce24","ssdeep":"96:55gFXyzye+TdqclutbJJTZ2+iWJNUTckHssV/6:55MXyee+TdtutfTZ2+iWyfh6","tlshash":"7491c8d923707dbcf16e09997a1e984cf14a7a2ce72f4ca097f9186359c30947925b40","first_seen":"2026-05-14T15:34:33.177398Z","last_seen":"2026-05-14T18:26:12.487466Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/sec-init-g7/challenge","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:40.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/sec-init-g7/challenge HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nx-client-trace-id: 5ce5f0be-42fd-4f3e-9e48-8db77785d54f\r\nx-req-ts: 1778783139976\r\nx-req-nonce: f8df8dc1-d16d-4e3f-8f34-a697f1154bd5\r\nx-req-sig: eb7b875267d7fd553039d7c7482b08b75a5ec10fc2453116fede4a2f81ed362e\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 99\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q0\r\nx-client-trace-id: 5ce5f0be-42fd-4f3e-9e48-8db77785d54f\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWUtJlAf9t8XR4bfoDXQRZ3nd5TsRCUNZr6WW4lKc5%2FINGoil0BoXrc4DEGTp4ocMTkPcoDDXM97n1TyD2lomBRvmTM1W9XGYPtSuuhRcF6WARWjZiNgu%2BbqacmJOVNKfGmr0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf26138840b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3affb30953106ae137342fd3a4e29e5b","sha1":"ee1edfac607bd4e9537670b30158a674aa2f5e83","sha256":"907aa43385be25aaa650051b975e8b21630edaf8e09ad4eb48a5bb65eb6534a9","sha512":"a76a8a41476cb0ae22487f4efb8e03e098fe31a8f176466836e8a56f2bf2816a32eaba94f048187135ed79cf41720d6ee88e0874d4c18ac8f077b5ccf6f6bba4","ssdeep":"","tlshash":"f0c02b11df10844a8343c717c82a4c0c0274d40d568430d155f3a834258c9775f7ccc3","first_seen":"2026-05-14T18:26:12.492021Z","last_seen":"2026-05-14T18:26:12.492021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/delivery/page-09b466a5be35d65c.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/delivery/page-09b466a5be35d65c.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"537b-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JkG9%2F%2Fe6CfjHtudSoNR%2BY84FedSQ%2BNChtX2M7AcEOmGBzRPxMFyy2Psuzbl27MAo%2BnLTi1%2B9RSWr35q5p88Ub%2BfZSMbeglTEcRxGCgByYJKuNbcevbQVkqgwP48xaOVjK%2BHUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf268387e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21371,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21367), with no line terminators","md5":"03b9752e7500e5ab33b9ae602bb5e838","sha1":"8a7959d96645618b05fa7dbc577180fab217b49d","sha256":"f0ed5f0057620edc7454710cbf2375911f7857c2e01649593740a822e681b2af","sha512":"a5a536ddfb7ba03e6b529ca467ffda761ce0f2d4ca6e5c54aaf2c6422ce07deab73410d0f24fb9b953e3145ea820959069a311e97e94d1b13f980061f431a250","ssdeep":"384:nxeqHS6bezhhRG+kxOZcQoG0GliRx9EbZ4hhas4qXdWeerg1UIW9P6vgkzYrsr:nA6qdHGnxOZcQTPlYxabZ4hhF4+dxer0","tlshash":"3da27485e386bf9cb63b04d4991fa00ca22e1f94cb2e48b5f5f874211a444d97a73bdd","first_seen":"2026-05-14T15:34:33.217731Z","last_seen":"2026-05-14T18:26:12.495977Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:46.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 6f4265df-0e56-4e1e-87d0-cff7a1963f52\r\nx-req-ts: 1778783146815\r\nx-req-nonce: eab60004-591d-453c-9a26-7f785fa888af\r\nx-req-sig: 4bbc62cd05bfa2ae89d48389f9d047e6caa636adc5d6dc827dfdc65007535465\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 86\r\nx-ratelimit-reset: 54\r\nx-request-id: req-7qd\r\nx-client-trace-id: 6f4265df-0e56-4e1e-87d0-cff7a1963f52\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5lXvznvEdx2bPTvVK3apuAlR9NOEC7bDY0KTf2gEtoQ3hZ8N%2B1D%2Btm5HdZyB9L3IHvpUHUJe6hBsCzLZcw%2FJOvaZ0aJ0qcO3sSFcr%2B%2FXpxaSBgIdzYY%2Bg8khDltYzXwuV7Rhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf28bad310b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:50.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 0ccce138-0b22-4708-a82f-21bf12f5b809\r\nx-req-ts: 1778783150850\r\nx-req-nonce: 267023b3-ae89-4534-95d9-39efda2858c1\r\nx-req-sig: 6f3042e588e870f27fc01ec877914414363fb1908fe65db4d4ce7c1c76be76f0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 84\r\nx-ratelimit-reset: 50\r\nx-request-id: req-7qf\r\nx-client-trace-id: 0ccce138-0b22-4708-a82f-21bf12f5b809\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5zjATwA3ytfHHYa%2FG6ijiZ6%2FEoqlqTmZdUe2p1fUozUlAjstSQL90JUj1YfKY7mQDeJkh%2B8SFVPDBz18UW2E5axWQrKL17GZvLIeabSxKjoXl7Q%2BqwbamTNTAWiqQBy5w1Dig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2a4dc350b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/page-0de1e55766cb017f.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/page-0de1e55766cb017f.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"5aa5-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBfIB5RYodlawScDPSuqgygmv%2FmlHWu9DjDRmHOiYxE3aiG1nN4nBBg0qsvjTc1BbZXpVD3eLu3lkSxOffy7o1qGpEGzsHHZSNGOLIS6XuKMqiYGC%2FgUe1sRuUeF%2FZN%2B7ff20w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd4b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23205,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23199), with no line terminators","md5":"df6dec8080987c8e743911f5141e4d26","sha1":"08067cc896b5bd2e74cd4bc336ec00980d5ce132","sha256":"c5922e5047ef7bf7ee1fbb86b81a5e6ddae8049c3f4695172988479b4d1c7286","sha512":"5932f0588e8fd46012413707925d472fe123d7c7034373ba2fb5a91a87c2051f67dd77c44a8a0105306476deab1f461ecba0f8e5692529255d7c3715a6efdaf8","ssdeep":"384:ucTRIoWFdp4DdIzKGVnl+VbqETZlTv3GdSbhs+eKxX6NTCTpT3:xRNYdp72Gtl+VbqaZlTEaleKxak53","tlshash":"dfa2e859f6a7bbadfa6610ace0af400cb13e1f55ed0e0810fab47c521518de5ba13f58","first_seen":"2026-05-14T15:34:33.210296Z","last_seen":"2026-05-14T18:26:12.50069Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/sec-init-g7/verify","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:40.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"POST /api/sec-init-g7/verify HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nContent-Type: application/json\r\nx-client-trace-id: 6fdab683-c3c9-4358-9dcd-32eb3da30d3e\r\nx-req-ts: 1778783140592\r\nx-req-nonce: fda2dbcb-d53a-438b-869a-51584a266e58\r\nx-req-sig: 7966f1ed8a20f7915c3b808fa2a3cd8e71b3466485bac3bafc630cfeeb89b798\r\nContent-Length: 465\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 97\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q2\r\nx-client-trace-id: 6fdab683-c3c9-4358-9dcd-32eb3da30d3e\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InOiVOeqyQryXmTl%2FYm1mVycT%2FQs680qqXjnc3OCHbDMZ07xzNNNQmcy07L6mKA0PnPUseq1k7EilxfEDAQwnVbBwbSzEosx1%2BVbkz%2FqGZf0CjAxvTgRFYooeo7dRRv3CBKaCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf264bcf90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0e96ba74ea75fff48506fe20743da801","sha1":"d1e4f9e74848b22711d68e1457e5952ff984c6aa","sha256":"cc78cb66ccacab0de0c4bcb684f1a03b53f204e7a2de69614c37e2e22058b504","sha512":"31688ab7bbef4288d224f47b3da2345493db2bf12d2b1a54c2631ec9387325088e5c05f3d20104cefa55ef1b72e65ab868ac9f7d8f1f6883aac6bdf63c776d09","ssdeep":"","tlshash":"93d0226e1b2aab30386108107e898e50482d206004a000ee5df0cc2ce19219c68181ab","first_seen":"2026-05-14T18:26:12.50164Z","last_seen":"2026-05-14T18:26:12.50164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/b3f718d64f9a6dea-s.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/b3f718d64f9a6dea-s.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://e-worldreship.com/_next/static/css/3e226b40f5bf5b9c.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16692\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"4134-19db29d6d32\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUUY0NDmRDsdfVFZybYltfKGqUCubSZXwCwQkE1WV747pPWgk9PF8rqerDR2mYOGAexTZLPqu3PLSXLTj6CZ5prgbZ8Vo56MZPFdG3SmgwuX4mDHVQ2gzwAbPQ7afjZa3AgBPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25fbe350b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16692, version 1.0","md5":"7b8d2e8d1d6863bd8250cdfe9b2a583e","sha1":"1708a4aece7b9ae72ec49c245d200f9263d631d7","sha256":"fab8a0056d92fdd8d64fed4b049744144e1d24d08762c513bff78265299ed7a3","sha512":"6a72723fdbc84183aa8a82c4829158e5d47ae7ceac22ac2f89efa8add8db7e2427b65c8b6971df4ed1150a5d3868659e5f5c3f8fab3c37f0332250cddf72d649","ssdeep":"384:RjHLH4ke3I3yBXispEARsSTU8awmK3390NR27+zzGcZGqwo:FH7d33cXewU8apQ0Np2jq7","tlshash":"ac72e1c970c074ea9ea815ff8070b85d251255fbc7c57df80d313aa6ce9601d8c185b3","first_seen":"2026-02-22T14:53:57.974223Z","last_seen":"2026-08-10T09:14:04.813805Z","times_seen":575,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/ext-chk-v1","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:40.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"POST /api/ext-chk-v1 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nContent-Type: application/json\r\nx-gate-token: eyJpcCI6IjkxLjkwLjQyLjE1NCIsInVhIjoiMTE4Njg0NTIiLCJmcCI6IjQ4OGQwOGNiMzQ5ZmY3MDgiLCJleHAiOjE3Nzg3ODM0NDA2ODQsInIiOiIxZjQ1ZjI3OSJ9.8UweJnzeSECtXjot4k3-GXmp1t4jlkeoUik1Klw0MbE\r\nx-client-trace-id: 2911b423-85ab-44f7-8341-7f9a7a9465a6\r\nx-req-ts: 1778783140712\r\nx-req-nonce: 69d4c09c-768f-47e0-93fa-38ae4325db7d\r\nx-req-sig: 10b728455000c18272dce5daa6747ff11786bd526d239e07c87a173c687495f9\r\nContent-Length: 210\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":210,"data":"{\"p\":\"9eb5dee654923970086d7c2c29e4c748:2f14c7013e64cfe3bbc882848443f641:bb95ca013941f56ca3eb995d644d1e143f3b3b283cf010e2e066c8301ba6fef3cad556b8b93fa1d4766400f2e21a56e7f038a4c2682291c232d215ab00cf4eae41920286\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 95\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q4\r\nx-client-trace-id: 2911b423-85ab-44f7-8341-7f9a7a9465a6\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeTbMY3J6WsrXLWmkH%2B9BSMnUOdf7q8p7LpSIvGUWGqvcVVW4Ib2puBi5CNxA0kfimk3ofKnHquqS9bGOcXMJT6IvcMs6tZCnGatPN4JMHOzVvHHJI9ng9SvSBPJ173tCUovLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2657dc40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84d36b1ca33583115080fb4740cba162","sha1":"02bfa8b4aaf7eb81ec9e07b7070fbd3adb0efca5","sha256":"d9b28cfb9ef853b89ba40c4bb66894b7118f7a1351cbffd3b1a1e8ba2fd15cbf","sha512":"ae5c3564df4cb691d2b3a7dacda67885bf8f2c273931e790f93c8fbe5ac572d6e798bab42427b0aa76e64374b193d7c0cd9cabfd2c60fa671f0f1349e7b0eba2","ssdeep":"","tlshash":"1e11d580ea647b98b0788b0bdb27a1ed2bb98b13c74d5a66463b324c44031760b8180a","first_seen":"2026-05-14T18:26:12.503627Z","last_seen":"2026-05-14T18:26:12.503627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/ups-logo.svg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /ups-logo.svg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"7eb-19db29d6d30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10306\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJk1wO31%2FwLrDMBeSBM4LBMPwen5vazVzFP29J7do5qONjerXqdjAZVLPYcjLD4yqi1KzjhVo8kipUZyJ8IvUBhGYXTYvrtK1RoCNFh3E2FmcyEtYLIpHzBQZsKP4bhSe0MqiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26878c90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2027,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7af10b443a8f054cf60f44437b854d3","sha1":"85f2c2e6427addba1b09886e3ced87e568734c53","sha256":"958ad034062a965d58d325b2cd11aef1b0623bd9a3229a0f4ba36f3e63fd52d1","sha512":"c8108492d1499958a49c1d201316cf1da95dabb12412414a884991d1ab01d646c9346b44786cc7e88eace36e182df8383128d95ba4aecc2a66c0a2137a6610a7","ssdeep":"","tlshash":"f941a5fd6b7013fc218e4b6fbf16e45ca54af1acb3e209c0c25a5923ea820046448850","first_seen":"2026-05-14T15:34:33.193695Z","last_seen":"2026-05-14T18:26:12.504864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:43.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 72a32660-8710-401b-96e2-d275ebc01c60\r\nx-req-ts: 1778783143821\r\nx-req-nonce: 2eac935e-cca0-40e2-8190-cd4610790e51\r\nx-req-sig: 012328121cb8d8982d98eb78d031ebebd8e31eb692b629509fd9a9ca4e2b982d\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 88\r\nx-ratelimit-reset: 57\r\nx-request-id: req-7qb\r\nx-client-trace-id: 72a32660-8710-401b-96e2-d275ebc01c60\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxhJEG%2BSTrH07DHdRCUh8Q%2FdH%2B3m0x%2Byw2sxHClKVpwKud1v1NSabkQ0j0GrhENM8hcICvdeFA0D7LaPVzu8W73eoL4g5b9SQTlLc6KkdJig2WxwdeFKR666GMVudNTSZ2syOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf278e9c00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:48.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: cc0c8a04-53e3-49a1-a6a8-6a5e131c8cdd\r\nx-req-ts: 1778783148711\r\nx-req-nonce: ca666ed0-9d82-44c4-8f7c-8aa95dfbdf99\r\nx-req-sig: 97637186adcfbc05029e0ce540b8d7e39198b1ec2e8e3aee841ac6069fca56d0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 85\r\nx-ratelimit-reset: 52\r\nx-request-id: req-7qe\r\nx-client-trace-id: cc0c8a04-53e3-49a1-a6a8-6a5e131c8cdd\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXwmRCB0Y3B2SgnOJMQzMOcX7VNLXGs4GraNhYqNIsHMOutBlXdXprVvPEfOOT6Vq%2F2%2ByIrPDSTD6O6WZrTaWKdQb4XpYZZMQLO2DM7bc0z75fp2qOY19%2B2uDwk%2BHcPJ%2FYiymA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2978b6d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/657-b961742bb90989ff.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/657-b961742bb90989ff.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"22c8-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pbdt7Cv88ITpZuDcURB6Wnqef5j4PkF5asTeTUmV5LJ11hR6NwkvXXmfk1uaFeAsb4lrOZGe2FgjkKuF5fM%2FSqDUo94u%2B3n7oYEwStGpcuqaFS6OmQPVvlDGzHPL9uQLckipZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26949a70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8904,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8900), with no line terminators","md5":"f6c592f7531c9e9c03ddd4f2eb1cd77b","sha1":"c3fad5b584e4d0ed244e93b5838ed4344e5841f9","sha256":"cf29279efe06610c0d65c8dc1fc314b14793fdf63b523f1e153e56bb35c08fc7","sha512":"a1f50625657aaa8e55ec15868dc1998bdbf96293e9c140de0fb87c8bdccca462ccafaf955150598ae6f12f9b07fb847855c1967d0bb5578ab2de6bab46168c37","ssdeep":"192:4hbYADyps8W3A4O0PZhRkGKJSRNzzX0/v:akADx82A4fP7OlSLzzXA","tlshash":"af02b73db2823058936e40fc5a5fc1d8666db446599ccc6bc2fb2a914434e6cfaf2f64","first_seen":"2026-05-14T15:34:33.203949Z","last_seen":"2026-05-14T18:26:12.506266Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:55.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 1be624cf-a42a-4838-852c-26e50e4dcf31\r\nx-req-ts: 1778783155376\r\nx-req-nonce: 78cc0976-b8c3-4553-b60c-544e801eeb9a\r\nx-req-sig: ebd761a61dd1c88a35fd5d1be830f4643d9ed248fb795133007420d9ba7eeb84\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 82\r\nx-ratelimit-reset: 45\r\nx-request-id: req-7qh\r\nx-client-trace-id: 1be624cf-a42a-4838-852c-26e50e4dcf31\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTwdwc98ag8%2Bq54r4VyQIpsaiAU8UnT5dn1AQSVYZd4QabhuZnAm47jX2hOHrHgv1GnQp3jnEYMfdS76QD6t5a3kxPDl2r%2FAO1%2Fie4vETqNJqLP5y%2BAd6xgU66w4FZ9UP%2Bi69A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2c12c130b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:59.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 1d022954-4217-494a-8575-538bed672239\r\nx-req-ts: 1778783159958\r\nx-req-nonce: 50a60116-a674-4e92-8aed-e635c3be5079\r\nx-req-sig: 0f06e449e63071d8821579c316a32b4a7397cabf0cf99c437ee6779ad47766be\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:26:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 80\r\nx-ratelimit-reset: 41\r\nx-request-id: req-7qj\r\nx-client-trace-id: 1d022954-4217-494a-8575-538bed672239\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zrbrv8wynyzs%2BDoZmXiJ9%2FPPL8bmi2qVyUY4fui4y9B6wwStibTCIzFCdiJKb0cHHvR4jEZ6mzJnuXL2YbVxIelnUJc7bp2%2FReHJKOIXmHPh6vQxH3QpPJ7sFC8Sm0GHU6i%2B4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2ddcd280b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/1e41be92c43b3255-s.p.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/1e41be92c43b3255-s.p.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37520\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"9290-19db29d6d33\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9cH3oF%2FiEZjpgifdmVoFDIoxvRglGDkhQPDphZtVWJc8N0B9m8yagpW9ibaY6dMKldSJsG2z%2FywnpTUQ3NEizJYSYvfVHzfk3IMRjEbfyawIvw47%2BdHRh4jhTc%2FymNcmeW5XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd100b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"b7627e3c9663757d70121f2ad4c8d986","sha1":"75be45f9d2d223ca9db09fc4fb29a14470f55f5d","sha256":"0a44e0bb6ba5c8537e8814c148ef7755f1bce12112361231f595ecc584a18d7a","sha512":"aacea6ee9d9b0eccc1670d80af09ef95f38e2bb098f0b8ecb40b794cd98b3909936e2116d6ff6561eac50608f621a2601ef320a23f5ead6f83181425957acd44","ssdeep":"768:7cfHxGPymCMqGpofV0K4bLO1uCzRPzTWprI8yrwkXrV9cBR8yFySNyi0:QZMPytYbnCzlqpr+59YFy1i0","tlshash":"e4f2f1180e54674f4aa9aaca029c74aae576a05b8743d077335c9bc8fee24b1437f1d4","first_seen":"2026-02-20T03:33:20.618197Z","last_seen":"2026-08-10T09:46:40.960869Z","times_seen":7753,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/712-81e145a3ec635004.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/712-81e145a3ec635004.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"1988b-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CclweIPfW%2F7t6QTWyFeN8IBwxWvJqT0FXu%2FUpcol8WRVY9nPjsYfwjgq5DlhBvhP0N12S10eNCZChdQkyxXmESmjo7FbI3wiOicXou3Hz08Lo8CzOLVVRtmmoHE1cf%2BYZO%2BMqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd480b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104587,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ca3b21981471dc3cc0a30d0649741bd0","sha1":"6b5c84dd0e0a06c64dacaa2c8dafbeecd629e7f7","sha256":"3d1fa35f2cd388ca1b9c5e6244f2e4197db24f325fd74b216be13fe1a1b7decf","sha512":"d93d3d3620ea3a41ec4f1490c6d2c72003216b3732d095dc07959a33f18345185e4423c41af878424c9a0a722586ae709dfb9d32eac2a7126c4171c04e6ddbca","ssdeep":"1536:iJQa8dFwcZuEihaGgatEsSwIaJhJ8ybaL8IhlTqhOmLoJJXzCo6otga+:iGpEa83SYPaopL+zZ6otga+","tlshash":"8aa3f99573517162c7cb9059c4bf4b42b33b59d8340a802cf67de9cb282099a61fbf7a","first_seen":"2026-05-14T15:34:33.252597Z","last_seen":"2026-05-14T18:26:12.511142Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/586-0582beeb715a626a.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/586-0582beeb715a626a.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"1574f-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnmqLbNnruZa3k7uwDEretN27fDB5ujrEbqXDMMn3riZ8svT0sCvvnq%2FNmQUAN0ui30g7i1c2mjXf3aLnOxa0gv7Qa%2F2hF%2BHeVvS4LpjIZX14DgQirzflYXDypt%2B03teWpX%2B2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf268386a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87887,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6770fa9f9a926824a5763fc0c963be57","sha1":"9cd2e11d8864246bac4ea0146e211ee6571c4223","sha256":"32749daf8658150a7c072d14abe5d19780ad50dc51374301ce95977a515766fb","sha512":"c8f342183692ae838cf4cb337fbcaa0da34769aa12326e1276a49b963fe34252605f2e0b8352d1005b224b31465b03467e0d80c99466415e8fb9190944942f67","ssdeep":"1536:Q2i+bAnGoMb4MMbqw+bGlFbhBdeMelKPR5Y//VtMjCfGOUC90px4pxypqRqJ5bs9:Q2i0AnX4M9PR5Y//VtVxypqRqJkfEFMD","tlshash":"4783e7ca33a6b1154bad51d720b94003e3a9be5c151d40a8f6aa64df7b9cc85f2b3f34","first_seen":"2026-05-14T15:34:33.230807Z","last_seen":"2026-05-14T18:26:12.514113Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/layout-8ba93b7956076135.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-8ba93b7956076135.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"b19b-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KhkPHbt%2F4HVJsMFsm96dYwtxI2awETAy5fxEJ2i36KPSsuTGsbBF8O%2Baf1ky8P9gyUQwtFntjkzxVkhDkhY2vPvHaJApNmU4oIkUmiebZ4E45X%2FDpXyO70iKrDYl9cPNq1wjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd3f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45467,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45459), with no line terminators","md5":"bbf4fe73ce8517413dc470d94466396d","sha1":"1534f33a97429261a5394939fcd21e8e02c8a2a8","sha256":"262e722c8af1a189dd67d3de2717f67fea502f54540907e802c2505986c7535f","sha512":"cfbbd8c51d143294d63b357023eace438474af60d0c77c9a54ff75bcb5253beeedce8cf4f73e31066562ba3012c3babb38871fc4633dc2c5e04a69ea8a40ff2c","ssdeep":"768:T7O8N2tZZOvdjC7BO92i6dy3Yd5zBxJdH9l49ilxA3Ge5Lq:TWrw6/b3JKi/A3Gedq","tlshash":"a513f9e5f356ea78a5a500f5d06f1108e23f2f94aa4a4420f6bc7c651a2cdc1b362fdd","first_seen":"2026-05-14T15:34:33.191827Z","last_seen":"2026-05-14T18:26:12.515791Z","times_seen":3,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/619-9168df9c2a29b74b.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/619-9168df9c2a29b74b.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"1e6c-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAMtTMVLoXbqAIkHO%2BC%2B2XALV8mMSOLWehtXDRCbfmEUBmxTWqaatoBl5dr3SpJ%2BzrFou1ypDdCcV09j1rN%2FWgBnOA%2FqhwfIZSQO7TS1Q5JZ2gh4A7G997jMDxri3PFbjMmh5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd450b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7788,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7788), with no line terminators","md5":"f1fd1da53ea226a02cbf1ceb1d3a3177","sha1":"f98fe160ef9abeccc8c1869bea2a183db34421c5","sha256":"d29b3cee8caf82dcf98b8b3fa64b74c18ddbd188eb535a883f02e0987a923abd","sha512":"6c8a81988b0fff648be482b8ad8d97543e58c2ff372b3073038133afcd8d8d26f547870cde1ca0444b04bf7b6fcc65ac22882fe2c081f79d09983c6504a3eabe","ssdeep":"192:rYOHCx4wMcGWgSaxTPKnMeoBqSgZc2c3GbjqSkT:rjiGwMcGWuTP8MFmorH","tlshash":"b2f1d9dab1e1f8e2836b1190443b100bf27e5db1181e9194f7a95ce6f9b042c91b2fa9","first_seen":"2025-08-26T07:16:05.930831Z","last_seen":"2026-08-10T05:19:36.991991Z","times_seen":194,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/ext-chk-v1/4969de4b-fcd6-4d3b-9fcd-17b5e4308143","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:42.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"PATCH /api/ext-chk-v1/4969de4b-fcd6-4d3b-9fcd-17b5e4308143 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nContent-Type: application/json\r\nx-client-trace-id: 52ef3398-602b-4711-8cfa-513c9c1b859a\r\nx-req-ts: 1778783142118\r\nx-req-nonce: 80a9163d-8097-4ec5-b47a-6adee503a0ae\r\nx-req-sig: 04843dd313897c2401747f75cdb90fd3cc83a097723f037cde4345d90aa55718\r\nContent-Length: 128\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PATCH"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 92\r\nx-ratelimit-reset: 58\r\nx-request-id: req-7q7\r\nx-client-trace-id: 52ef3398-602b-4711-8cfa-513c9c1b859a\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3imQYPGsvegy3C7AJ3ElY97NkvGVrxxmbNxc%2BN8in7jQHTcd8ddYEoDkmwvn6UMZgtIy%2B0b1hZsILQ6XbK9xBvj4WaDbHKliM1Rfx9cf3pG4KsBSm99Dnz21tcfP41Crg36PUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf26e4e940b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":934,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f57a4484165affd0c1747769b036ff0f","sha1":"40466e0898a8e0f5bbdb3ab681c8c21118438e9c","sha256":"63286e4ed832893817fb1f745fedbc588d1230ab343b768bf70c117bbe757201","sha512":"7359920ea1d6eb053791b60f9dc94a1524ed0eddc764bb107c216778819e3061d2dbc153ee14d708fd67aedee962f11e9839b07ee1e532b8ccd0e9b981f79ce8","ssdeep":"","tlshash":"341184385d44a4b7e3498265ebb3adc10b7c9b005323aed4a07949da207b41b9bf31e6","first_seen":"2026-05-14T18:26:12.518502Z","last_seen":"2026-05-14T18:26:12.518502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:42.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 15993c8c-cd90-4e90-a507-135f2560687a\r\nx-req-ts: 1778783142609\r\nx-req-nonce: 9307eac0-236a-4490-a7bb-64e6f3af354f\r\nx-req-sig: 4dc9ee88a654c99443338416a84d1d20142af76d027a79726bd7f94cc4e65404\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 91\r\nx-ratelimit-reset: 58\r\nx-request-id: req-7q8\r\nx-client-trace-id: 15993c8c-cd90-4e90-a507-135f2560687a\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxUyqd7wxMm1fGURqF5Hx7THh6Y7zkpHcsFs5UeLb1ANoen%2FERC82jh6CAaRLpMvAd6hrbcaY1YpnrCVtKULbKNoNKcV8s8f5wyZOK2qm9U0ymkuYcMEYTRwA%2BOmFwgB7g2%2BdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf27159db0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:57.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 0343aab3-44c6-4f2a-bd61-072a4e0ac53e\r\nx-req-ts: 1778783157657\r\nx-req-nonce: 0a08353c-fbb2-42fb-aec3-fc3967f0e099\r\nx-req-sig: 16016e9dfc63e2be3d042b7ea7d22809dc54c51db6685700ab4dafa6f9cdf5c4\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 81\r\nx-ratelimit-reset: 43\r\nx-request-id: req-7qi\r\nx-client-trace-id: 0343aab3-44c6-4f2a-bd61-072a4e0ac53e\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EE5XdSUs3hOjvpRvCVracLls4408Ty%2B2tum%2BfOtH%2FVE6AA4%2BsEmke1s%2FNc%2B65BcdSk1ZbguUb3F3h7%2FO5lxIXR%2FP4HMe9zocM6qVqDX%2BPF%2B4M%2BaOJgBwwfkSfSrOq0klM2uX0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2cfacc10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T18:25:39.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), usb=(), bluetooth()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, noindex, nofollow\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIpm9R8b6GHKLNiWnWxpTIwBdcUPRyVULyVnVO5BWkDhmHgaSeKCgJf%2Bp%2FLqRKlefuV8ez9qNp3iszi4uNLBZy%2BXlRtR5%2FKMJrxzK6DKbs42341yX8RUmjghM%2FH9hGsrRFKvZw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fbbf25ce87d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25040,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25018), with no line terminators","md5":"c85d2ea90b810e1b3629b3e26cfa2eea","sha1":"b954c50077f2e4e96fd14d4ca26edd7635372bda","sha256":"8712bdd771182de0ef0efcc50460304ba0873156d9ec5d4e6adb752ab08a2946","sha512":"d708af88639078e8af552cf4e2906940c1cd4dd2510e0266e23fc079dcad03366ccadc19923a7f7410cddf719cfcc3d7ef671c42a8df8427cc47aa75af7052b8","ssdeep":"768:kbRmeQOgWhVwIACLRgBTjBs4NCkcD+JrvMGxThkR0mI9:zk6BTjBs4NrcD0f","tlshash":"15b2066abe00ed0eaa639e5c643e7c3c408ec27bc678dd68e2dcc92946d2d745bd1c41","first_seen":"2026-05-14T15:34:33.201193Z","last_seen":"2026-05-14T18:26:12.523807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":31,"dns":15,"connect":1,"send":0,"wait":129,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/css/3e226b40f5bf5b9c.css","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/css/3e226b40f5bf5b9c.css HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"470d-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FlJQnYUy4Nr0gqjl%2Fk3CJbUmUtjtGrawRG8VK1ckj%2Fh5M0pl2fOL4t4d1YAt9WwIOFBBvHDgbACg3GIBPaf6pxvOrwSDC8kX6y20sKHPTpjWY6gFuQ4ul66EkeeKoJp%2FHh7uRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd180b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18189,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (18189), with no line terminators","md5":"1ac6c53424d3e3e77b91353b27f7fbf7","sha1":"1914812d146cc95603f3f98b4622e091369d88da","sha256":"32afc2453e2c667fe21204b5d0df67f4b98438ed9d970f152c2b2b8b563e6bc2","sha512":"a0e5b2dd01ba4a16f83c914f6e694df04f31ebffe498d933c63c0d1dc7faf1f7503b9d544f533e15ef517cc50bed8c51092540d69ee4c09e7bb433915e8f6600","ssdeep":"192:Xxh27fh00u7Yx3LYzxv27eh00u7Yx3SY4xN27Rh00u7Yx3xYSx527Lh00u7Yx3XH:hM7p0Qc9+7W0Q7C47j0QSMk790QIq","tlshash":"a782bc30841a45cec432bc9232d53f63797d142262d44936da6cbcda8feb8f6b2a575c","first_seen":"2026-05-14T15:34:33.189066Z","last_seen":"2026-05-14T18:26:12.525114Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/details?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=vusbg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /details?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=vusbg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), usb=(), bluetooth()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, noindex, nofollow\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htPLzqmYWCTMBKhUPTTrCUN6k42xIAVSrTJrQX910c3lsqvwAViZIbbyvlrHDyTCI6rvyD%2FtoXOXXALoV9lZff9PD0GKcdLUX%2FrbcujI1o3qyQ9C5WsoKDOa5L%2BxvcyHBotEhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf267d8130b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10654,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4459)","md5":"391398adbf422d967bc76d91a1cb669b","sha1":"7eacce34862534205c2f9d40ec2d5b55fcb69024","sha256":"00a824ebe9db0e915c93fdd68f97c131ed8302ef1fcaf49ecd48468649623a77","sha512":"63d0d710772b3d8dd188e247fa69da1dee4167a3c3640a7ed25d860572d230142bee1f7746ebf7ede206a66c2d6ffdc29e655f5f665f043ede96bd629a4dec68","ssdeep":"192:gjV0MpDlOnW1YLvSLoHYkyxm/DaJ0ueKY4KRTThh7gMfa7RXnNfkOMDwi:gjV3pDlOnWER504","tlshash":"b922413f9b05dd3eaeb78984044fd31a928d473747705df6c6ec9d2807922262f8a392","first_seen":"2026-05-14T15:34:33.25447Z","last_seen":"2026-05-14T18:26:12.526324Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/details/page-ef97e3da1181d968.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/details/page-ef97e3da1181d968.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"6556-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10303\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f58rgTjvoo7ZlIYOgsf8pfqzHYNdnFKLLQF%2FjqKse8fh0NkY3KxhAEQ7MAgAbnRaMR7GL%2FeyqTq8rHo2FKHNuMLRqhWo5r3XVq1a4ntqFmQQASUHRd21zrtYfeOo3mZlCUmx9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf268386f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25940), with no line terminators","md5":"13801f9f8e273b508404936d6cefe1a1","sha1":"4eefcbd34b0be9945f66c10cf066642399640fbf","sha256":"b3a3e2136969dfaff0be2c111b04627fc753f469cdd1177d971aa693be1040e8","sha512":"79b2d87be61dbd9f4182976dffd5814a89baed6cf305038077bb20bf2aebed792f7766a2854f7ead68bdda6f4d50e9a4966d7109c623d855928152ebfa5a5815","ssdeep":"768:0cBxwI3qyIuGPk+gqjFDKPU39kzVoLcShw:0c753qyIuGP5kuw","tlshash":"a1c27391e356bfecf53705d4951e900c612e2f48cb2e8c65f8b8b8221a848d57b27bdc","first_seen":"2026-05-14T15:34:33.194906Z","last_seen":"2026-05-14T18:26:12.52754Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/4bd1b696-21f374d1156f834a.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-21f374d1156f834a.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"2a3db-19db29d6d34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YTLU85opnZJ375mxZgPZNL5bmVGlf7rygNV%2FFpMFLsQLYgpUTKdyAtfDmJRjq%2FKjvNSI0xLX6vhJ750VKSxRb2FNv365T49zc5Gaa8HaSjxCJxmmQZdaoP9FZ7f9Y%2BTV%2Bk6yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd1e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173019,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33267ce03293bb55280e3ea185e6a69c","sha1":"7d464409e95b29aa2e89a2cff503ddc587b58ba1","sha256":"8f17e846e16070e07820ac8c0a9f74cd7027b5ae688ee928e2fbf822582e0260","sha512":"da369f64bf1b2019983c778a351a09af3a4e069d95c9526f27daa6d781ea304291a86134f24f322bf7bfa7b275c02c61bb0f50201fe8e295e4502a67c0592c67","ssdeep":"1536:FWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:79LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"a6f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-15T10:43:19.862472Z","last_seen":"2026-08-10T00:04:25.186543Z","times_seen":617,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/main-app-ed21d86334bed8f0.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/main-app-ed21d86334bed8f0.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"201-19db29d6d34\"\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3x7RgYr1zXlkgQRkyD4%2F1CfShw7rs8uQvYFJfhKuClTjq51OdPUY6IPJceTEvzykIOhX50L5NJ95lvuA19pPnKdEltU8Yhhid9oYtPnzP4apjAB5UssvQLH8PxZZ1mMaO1ZsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf25ecd270b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":513,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (513), with no line terminators","md5":"81aeba7cf5ae489b790f874bfa2a7398","sha1":"e792c4e3b92f3308adb8ff49d4cf3484c998823f","sha256":"937a654f94014d18dfae6fe43460cfebc2e682e38e79fd4e304bde3dfc013ae6","sha512":"f927ddab1f96b8eb7ad27471768c1bdf1fcbd283ac9ff0cfb8332294026f4a2c8b65c77cf182757e78ff84b1c20a69b14410d15b162fe24fb43065c4a9b6c007","ssdeep":"","tlshash":"bdf0195a4f0cf41f5c16ad60fd976ce2185f4179302b4d656910ee613c23b6cd260409","first_seen":"2026-05-14T15:34:33.228005Z","last_seen":"2026-05-14T18:26:12.530379Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/887-7fcf33dd54ee5f53.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/887-7fcf33dd54ee5f53.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"1a9d-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXH69rWyKIAlLa6az%2F6qGUI3mPBygV7FPW7v6l5POXFXnY5MiLioRa97NccbnVvJgkgHsvsP%2BWAqWr0n2K%2BFhGLwaKC9wBSqPFYxyVVZH7J1DIya9Ype442OxHaqJ%2FEFJKI5Hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd2f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6813,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6813), with no line terminators","md5":"f3b92cee0bdb7990bcbaac347c24c64c","sha1":"e6858f2b4c7f25a1e2a2c1d3f772ddd92f47fde9","sha256":"3e2ad93ceecfbb5ecba8b6c5026770e862e96dc3d4498c2827194a283377d562","sha512":"c060e5bb2b8801be80f7a2b82438c19cf7329e9202468eb75c7004be90095e6de9c01595d0ce701ed0fe637e1c859022c51e4fbe0ca263ccf4989437a8061d3e","ssdeep":"192:vL9Tr7Cx/zOG3uotdngX2XFu8j3Zl4ZGj2FlstVqAMS6:vL9cCnmk8j3D4Zk23stcAMS6","tlshash":"96e10af6778afc388666c58888379181e5950a76240f6480d7fe8cfd6255fc988f2fc9","first_seen":"2026-05-14T15:34:33.213499Z","last_seen":"2026-05-14T18:26:12.5331Z","times_seen":3,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/loading-0a03b936fb2edc58.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/loading-0a03b936fb2edc58.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"207-19db29d6d33\"\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4dI67nSqt%2BMSgY0FnkRXSYhvbbhA5tnHKc1sflllpLSRcKG6U%2B5cf4Gexljl3x2FD6sNzpsFRVho0gRYMJl8U2xo04kebKEn1ubdzFIWJMh4tniQFw1bAXFB1cDpirG1rHxYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf25ecd4d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (517), with no line terminators","md5":"a8d9d051811091ad19b657ae96f21558","sha1":"14e2ab3967790a90442e2ac2dbbc979a282da917","sha256":"223b70c99e20735b5c1c7c0885a5041fe4e5024e6f00834d1454c64be495fcfd","sha512":"0c2b0df75d6961e211d15fa77c7b2a2323324838075a592c6d4e5984aaec98440140e8d4fcfc65e9dd38404593712ffadac5f9dbc4ddf6134819de0ae943cfd3","ssdeep":"","tlshash":"a5f0c0c415477f2cbe260c9cb5ee5804305a5c6268ce84943b665d2205a69b4d231ea4","first_seen":"2026-05-14T15:34:33.17396Z","last_seen":"2026-05-14T18:26:12.534612Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/global-error-9efccbb28ada396e.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-9efccbb28ada396e.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"977-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcEdvAcKMJEwWnnSA8%2Fqx8dqD9sFINYLlp48RtDCS%2BrrqP%2FaDWSvVoXTFXhl8cCVug8MoifvZXyEo1fQhZ3Hevm53JG6HFQbWYrhoADo331%2BEzN2xQfGnS9ZUFHkJNlgkIB5Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd4e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2423,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2423), with no line terminators","md5":"e9a3c818a6edb03fb77f33708db0542b","sha1":"caabf340beab447e0508ace44dced2c1e5b4e73f","sha256":"e63d406c710f930ad950d6d65f9861c11d94a1c4278e82ae4501b0f2938731a1","sha512":"ecb6cfa6087f506ffbcd8651e7d2706a9eb7efde3cc3f7739423d109c02c3d55c1e224977a9b20b33f4319668f74dabe529100d0ad21e141b2c404390c4131c4","ssdeep":"","tlshash":"a84164857190eeace16f04dc546fc00d712b3e2dd62ea864b7bc3ca118871ccb163b59","first_seen":"2026-05-14T15:34:33.185096Z","last_seen":"2026-05-14T18:26:12.536888Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/ups-logo.svg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /ups-logo.svg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"7eb-19db29d6d30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMekB4Q1S4H8prwD1DgnoPj5GUdac7jlrVXuJDA%2BCJP%2BgFh8YvC4b7u0l1eXtnr0EeON%2BcKtQHiPYzSKJhSbC2T0I2Zq3HBF68TAp3ORy3wsDiiVBMh2xN46EDlW4fQ2tsJ8VQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2602ef20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2027,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7af10b443a8f054cf60f44437b854d3","sha1":"85f2c2e6427addba1b09886e3ced87e568734c53","sha256":"958ad034062a965d58d325b2cd11aef1b0623bd9a3229a0f4ba36f3e63fd52d1","sha512":"c8108492d1499958a49c1d201316cf1da95dabb12412414a884991d1ab01d646c9346b44786cc7e88eace36e182df8383128d95ba4aecc2a66c0a2137a6610a7","ssdeep":"","tlshash":"f941a5fd6b7013fc218e4b6fbf16e45ca54af1acb3e209c0c25a5923ea820046448850","first_seen":"2026-05-14T15:34:33.193695Z","last_seen":"2026-05-14T18:26:12.504864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/apple-touch-icon.png","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"15b2-19db29d6d2f\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10306\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oGz%2F4XO7TQ%2F%2FacY4sDSm3CUuzl1Qda1bqsOqS7JyAfMNGIoUwfdFAObbcENpv2tQp43t%2B%2FSPHaXpdkOzSYSB6JG63O1b2zQyUNzYBTBAgG1zsiSgCN7sOUlOgqNcK%2FaIthGlww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf269399d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b669b1e24ed78c02cda3968ad60fecdc","sha1":"e208c8d84444829dd1e28d33bcac2c394ef702f3","sha256":"8f764801842d9f773a711820258515b17483f48cc4d1a938594c79cc0e2f04a7","sha512":"73f1947c63d3a65bdb105fba4fd42f44dc2b248a7926ac3bdf913e73fbf031d87ab4d841e1944302709aa6e18dd8b67c0a295d341a8dd785297e042c3bea347a","ssdeep":"96:O0Lou1vxHK/lZSzRMdfP1bEew8ZhpH6RzypyLDVAERIBckyWqbCliArYt07kPpvX:dLoexqNZFdX1lTp68pcDVAEWBcjWqOls","tlshash":"08b19ed8fc2d67c3b6c279610971b78e8075072790a6b450a82c588bd7b943d86bf52e","first_seen":"2026-05-14T15:34:33.182747Z","last_seen":"2026-05-14T18:26:12.538392Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:45.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 300cc86c-0d22-4eda-965e-00056fd7c3e8\r\nx-req-ts: 1778783145195\r\nx-req-nonce: 5602b942-7d5e-4c9d-8c79-5cdef27fafff\r\nx-req-sig: a6d44a1afa353cdc75cf8b8eed9ca01d68078487980dac9a3456d6264eb81edb\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 87\r\nx-ratelimit-reset: 55\r\nx-request-id: req-7qc\r\nx-client-trace-id: 300cc86c-0d22-4eda-965e-00056fd7c3e8\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFGQzZUIYGR2eIwXpFRPHvX6E5RXuObFzjRes6044c3qFixHwhuxvfuaaVg2wQr2q%2BEsVNDyc42x%2BRycwhcnciwvLDn6LN81fZF0fj2%2BUwoKwmnUlme2i0rWOp0TS4gGKoenVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2818a950b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/255-fab74d2b82b62d0b.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/255-fab74d2b82b62d0b.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"2a00c-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3bA0uO1tBZIuSc9lXRMH8Q%2BHeSAA4bojHvbGc4jfy0iH9L7S0usV3dy2g6B5bpREm1zSnSddDWegsljGvKAWGDGI7syhpHbcQ8d73E02nwqb0MvUlkBLkaOYyxpEDBeFlka%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd220b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172044,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a41bd3c910b1b0ed40642ee29c0e1652","sha1":"885ebaf58956b016bdbbf815c0da709ab9371f7a","sha256":"a64238272837ff56420c17ac86603c682826779a00a30b2eae06206c072626d3","sha512":"31b545b1cae1a2082059763b1de665bd9db49c7454be8541949e082137d2839e70c596395a441e1ba48315c064dd19fb6c676caa7d2e5de4a1e3c658c05a0cc4","ssdeep":"1536:Ch7TN3Izz+cHr4U5eHM0dhd7GcyBPo7eUq0MEeiTtaocZXxreXRNIrky/SQhuzQP:8TN3UrjJ0BEw15A4RN0z/SQuLi","tlshash":"aaf3dab676d0f8e107a780d5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","first_seen":"2026-05-14T15:34:33.248739Z","last_seen":"2026-05-14T18:26:12.540117Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=vusbg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=vusbg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), usb=(), bluetooth()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, noindex, nofollow\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeJYm2UotD8J1xX%2B5uyqRoVodH4zmdyXGl3c0DiRNcZmxbKzT%2BBF4c9aRXE5RIXoAhRL3Pvp4MTk2T1%2BCwA5xE6e3FSCugF0M3Lnm%2BzzuONYz75upBV%2Fvpjm3X9KTJtE4R4RAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf267d8120b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2461)","md5":"8a9792d3ec9a8a58dc3f3bf1affe9fb2","sha1":"b23afa96dd406c04893daf87325a92f51717470b","sha256":"2062d522412a7454b592efaa38b6af792d967885886350f6cafaf3506401df7b","sha512":"60ac677d69bf880bfebe153f4f99316009ca6402d529adab6d42889d036e7c451fd2130b22ddb96e0a0a377939da5e82db27d759366ac84d99b771fe4078e710","ssdeep":"96:WBEKhtZ+cJtVG50IqQvioh7ZpfbvzqXnDBvf:WBvDtI7fh7ZpfLzqXnDhf","tlshash":"0c91013f8b019c7e6ba781c4588fa30a635d833b97505db6c88d8e2c07d67661e073e6","first_seen":"2026-05-14T18:26:12.54456Z","last_seen":"2026-05-14T18:26:12.54456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: 8611ad8e-6df2-4c0c-87bd-ee838e01351b\r\nx-req-ts: 1778783141570\r\nx-req-nonce: 469dc213-cadc-42fa-b8ba-a47844963191\r\nx-req-sig: 61bc958a0dfb6b1f3bd494a9dc3d6fb442acd9dbc027380bdfb1fa53219dc4b8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 93\r\nx-ratelimit-reset: 59\r\nx-request-id: req-7q6\r\nx-client-trace-id: 8611ad8e-6df2-4c0c-87bd-ee838e01351b\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFPG0VGwncGCrX4HQXnLEDZ0sZVMkxS2lsIE64QscBwoULRbnAWjwTQihDfhX%2BnPgEC%2FKhm3TZrL%2Fcpw0OSE00TckGBMRfwZKRV32nCKBgZP0o34Flb5%2FZRYNh9hF0WLRghUnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26adb4b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/v-profile-t9","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:43.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"POST /api/v-profile-t9 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nContent-Type: application/json\r\nContent-Length: 354\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":354,"data":"{\"sessionId\":\"4969de4b-fcd6-4d3b-9fcd-17b5e4308143\",\"eventType\":\"wallet_context\",\"eventData\":\"{\\\"providers\\\":[],\\\"eip6963Names\\\":[],\\\"hasEthereumObject\\\":false,\\\"hasSolanaPhantom\\\":false,\\\"maxTouchPoints\\\":0,\\\"isStandalonePWA\\\":false,\\\"userAgent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\"}\",\"page\":\"/delivery\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 89\r\nx-ratelimit-reset: 57\r\nx-request-id: req-7qa\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHGs7r9P8%2FEpRPo%2Fg99ym7SSx01TtVePoQFp3pSs%2Be1iQLuk1NTPnWSUxGzDYqV6Gnu6R%2BCVcQ2QxfdohHj2dzNu4fReh0O150Up%2Fnw7bVl8ISl3uAlRxhHUCeMvldxCXmHNiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf274dd1f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"853fc2bf9d7e9c1b1821ff0ad669732a","sha1":"01a95180384a12218e60247b077b5e4fe9571918","sha256":"868e47b57dbe956f936f386e80c02648717112892e5966207a7fadf9f221e67a","sha512":"6063f3566ea0a6b8d3c3788ec3b1bfa096fb8cfd42028438c3f76f2a2c7e730393ef0ce05f5bd79c9beeee7dfdb6e42fddfd27f7f6867264b3048a01dd904ef3","ssdeep":"","tlshash":"90b012c660384986e26d01b0cd83475e17815645d9f710c902d9df3441cc64865155ff","first_seen":"2026-05-14T18:26:12.550567Z","last_seen":"2026-05-14T18:26:12.550567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:53.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/flow-sync-x/4969de4b-fcd6-4d3b-9fcd-17b5e4308143?consume=true HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nx-client-trace-id: f5127e2f-ba38-40fc-a76c-5b7248ad64ec\r\nx-req-ts: 1778783153112\r\nx-req-nonce: f3ebb832-0702-4b28-b50e-32110b6c3904\r\nx-req-sig: 754d2c3b00c9487da86021fb31c47d25ccfcad8ff7c9deaea70675ee8119ac3f\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 18\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 83\r\nx-ratelimit-reset: 47\r\nx-request-id: req-7qg\r\nx-client-trace-id: f5127e2f-ba38-40fc-a76c-5b7248ad64ec\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BasO9IDVdEga3ETzZs5aBhVjX6HgvvgSwzBlUmpWmXJh8onAHOqd%2F7kB0g6LSChPq2eHEIhnBHeEYmJCebRtvOnSCQKBgFMKkuOSi%2FA1SrNUi81JzyOmPD%2Bobboew7rpTJQldA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2b30b6f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91c77473661b0e08b45770c3609d1d7b","sha1":"22eda263bbce6c53604f2a62d2f1072c1a383fae","sha256":"9eab495eb8b3e4644ce57aec5a13d4a074aad6301140e849845cb53ef8234ce2","sha512":"f44d42699a344009207672da697ca9adf73a397eba154c6710e9399e8b8fcb19b34e86e4a043eec495e90b41ba251346919cd07ae59f648bf030e00b74eeb814","ssdeep":"","tlshash":"f4700000208028882000008a02080e0202020000300c2028c00a0200288a0020008002","first_seen":"2024-09-19T20:50:52.38086Z","last_seen":"2026-08-03T18:17:19.756231Z","times_seen":176,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/80841ae24d03ed90-s.p.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/80841ae24d03ed90-s.p.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19624\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"4ca8-19db29d6d32\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA2dyi835UhpcO4WpOArEwvMxQrO5x1qDhyMSww%2B7K6iR1heijuIqtNsZz%2FjlUX%2F2lHUbnxu76esWcwUDcI8zrx6mAwdEMIm%2ByI2v71MFUJcW3lYC%2FaZx%2F09ygZFvRWsK1NWGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd120b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19624, version 1.0","md5":"f852254ed0041481aaac038e94fb24dc","sha1":"f267ea755425453c9f682aabf9b27b6e4198b189","sha256":"32886c5ec61a0d06e5677a98c5ed78a5f1c788c18c5e8d7dcd931c4b6dc19830","sha512":"9bb7a765b7b23f55bc047b76a1ddbebd4fc80da952df2c2dccbdae12f2382a2f1af9e462c9248ce54f00eb3c5b583d4aa93404de68980ce3c5f56e013206684e","ssdeep":"384:wEiAWdvKvNjorkgadFQ7T01uATFn2RxDSUBRjn/a8TYY9+lPqVsN7ltstG512zBe:V8v8OAuT01hn+Lb/a8TYY92PqyiAZ","tlshash":"ff92e14ca68112ecf26c3b9f53b5316fda71d66f1a542d434b012a6ed90b789e31820f","first_seen":"2026-02-24T02:13:40.107685Z","last_seen":"2026-08-07T10:26:47.490738Z","times_seen":181,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/sec-init-g7/challenge","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:40.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /api/sec-init-g7/challenge HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nx-client-trace-id: 146b537d-97b2-4946-b53c-d95c474670e2\r\nx-req-ts: 1778783140088\r\nx-req-nonce: 7ba07c4a-fd91-4f07-9b7c-8cc3af8ce0d0\r\nx-req-sig: 0308626dbf0d90ec9f803c395794b85a19128d57b833c12886c0b11898506dfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 98\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q1\r\nx-client-trace-id: 146b537d-97b2-4946-b53c-d95c474670e2\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGn6YWjarLkobCI4%2FeruB2e%2FfQzMKWHMfvQ8I1FRXp9DvL%2BGWful65%2F%2FNTgHK6SkYW2RumOFvRQ4ResLEnPEDu72CBLDKOk74RJquK5LWdx1GxDCDOosXyRtacmIH4hK%2B2mrWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf261d9710b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"62b56993ab99632b393aef5d82ad992d","sha1":"a8ed13905131341a481ebb16fdb06cca1bf05eb1","sha256":"023c451b56f5cdc1311c4017d623392ce2a916e084a6c190961dfff11cabed1a","sha512":"74096ca6eef2bc6bc427783dc2b63539abfbae08b1add753f51d1120f44d37534c1ed36219295b29e064db10d89972e7b11e8a3abe4ab6f35f44b5ba97d70632","ssdeep":"","tlshash":"2cc02b49d6335c18f32ccb1f064fde0c513480efa48ba27720e7c3531024819320c007","first_seen":"2026-05-14T18:26:12.553459Z","last_seen":"2026-05-14T18:26:12.553459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/app/not-found-351adfdcade17e4f.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-351adfdcade17e4f.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"fad-19db29d6d33\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10305\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jTIGRciMpicgyjvH4SEH0eLAvvsiHiB0CZZEXB8edd1NW3dPy4KCi1xNjH6DtfbGc3IFs4bhAPFKkp%2FIqO4JQTx4yyWOqoa231evedxQRGYOOpKNeuiCXyVmRWMnauz7NWCIYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd470b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4013), with no line terminators","md5":"a67100765b08818b2a5b0b6173d16516","sha1":"a8bf200ae9501dbc2ab31c6949de1f287a8406db","sha256":"ccf2a3272be05193365201cb5ca0de246d89ead5844b2aea6fa1532bb78330f0","sha512":"bdb18bd7a993cca4160bd5563afa69a6ed420e52152a6182387f66baccede1c18bd509958809d5ba1ba4c098f52cbcc43d2a186094d0f6c04b4e44a45f63a914","ssdeep":"","tlshash":"7d81b7eca77079acb52e0aeabb1ed80cb14a6e2cf77b4ce0d7a4145259420943621b54","first_seen":"2026-05-14T15:34:33.236648Z","last_seen":"2026-05-14T18:26:12.559076Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/apple-touch-icon.png","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"15b2-19db29d6d2f\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8OxbNzAmU9osWdlMlftTPEt2rDYI6Bf%2FwP77kGLjs7nhjuKLefHWy5lkEV69jI0gTSmyK4cVAVBObhsp7CzbT4LFKXPb0IMNvbrNZIbSkiKHfNVevUFZwGFZ2jQU8YNqG6URQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf2602eef0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"b669b1e24ed78c02cda3968ad60fecdc","sha1":"e208c8d84444829dd1e28d33bcac2c394ef702f3","sha256":"8f764801842d9f773a711820258515b17483f48cc4d1a938594c79cc0e2f04a7","sha512":"73f1947c63d3a65bdb105fba4fd42f44dc2b248a7926ac3bdf913e73fbf031d87ab4d841e1944302709aa6e18dd8b67c0a295d341a8dd785297e042c3bea347a","ssdeep":"96:O0Lou1vxHK/lZSzRMdfP1bEew8ZhpH6RzypyLDVAERIBckyWqbCliArYt07kPpvX:dLoexqNZFdX1lTp68pcDVAEWBcjWqOls","tlshash":"08b19ed8fc2d67c3b6c279610971b78e8075072790a6b450a82c588bd7b943d86bf52e","first_seen":"2026-05-14T15:34:33.182747Z","last_seen":"2026-05-14T18:26:12.538392Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/ext-chk-v1/4969de4b-fcd6-4d3b-9fcd-17b5e4308143","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"PATCH /api/ext-chk-v1/4969de4b-fcd6-4d3b-9fcd-17b5e4308143 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nContent-Type: application/json\r\nx-client-trace-id: 2111aadc-aea2-4eb6-9914-a2ffdbd7e5c5\r\nx-req-ts: 1778783141026\r\nx-req-nonce: ae363c7e-7683-4832-8a8b-22ddee6669b7\r\nx-req-sig: f8ceeaa9af385dc24ae53e777ea11e34068bb15f19181a77f7bd8c20b9835cff\r\nContent-Length: 112\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"PATCH"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 94\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q5\r\nx-client-trace-id: 2111aadc-aea2-4eb6-9914-a2ffdbd7e5c5\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I7oRjintcKr03QjRjHiCvKORDDFt8NloS%2B26yE0Lq4ca%2F0hIhV7qyaFlUGFXls8qUC4PJMpBGpNscyz4oK6bPXkx77Rj8hhhfM1Pf0Vkhc0QeYMXInpoFcyeufGgB45T7K8a7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf2677fa50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":918,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1b3cf18858f179666f0c33f8c9cd77df","sha1":"8e2a5547c225668355f59401e1fc15704166a262","sha256":"2fc94be79d2823d4dc3cac3811ff2d20c335134d5db43e04d9a0ae664563e6c9","sha512":"54ed877efc36c7de9383d9e392bfac0648a871f6a4ad1785a6ba3839cd2282e554c285569af559d6e9c5b37135df8991e35a036ed1ba90e4523751ae1b44c24e","ssdeep":"","tlshash":"3311b7903c0d6ee1f5ce24aefffdca4950721424108d5910055975a603133774b04e37","first_seen":"2026-05-14T18:26:12.562596Z","last_seen":"2026-05-14T18:26:12.562596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/ups-logo.svg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /ups-logo.svg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/media/1e41be92c43b3255-s.p.woff2","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/media/1e41be92c43b3255-s.p.woff2 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://e-worldreship.com/_next/static/css/3e226b40f5bf5b9c.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37520\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"9290-19db29d6d33\"\r\nx-robots-tag: noindex, nofollow\r\nage: 10306\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0hqejbLwAZqMJTArrwvqFwnPtOm83q06AkU%2FWy2VaGBxufXx9wygdKJxDqoqeXZXc13ehQALvoZI%2BPXl6H3Sqlt%2Bj2u6mmGQcBHEo5BvbQGbbqFyUrXShK9HdcYavsxESwFQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26878d00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"b7627e3c9663757d70121f2ad4c8d986","sha1":"75be45f9d2d223ca9db09fc4fb29a14470f55f5d","sha256":"0a44e0bb6ba5c8537e8814c148ef7755f1bce12112361231f595ecc584a18d7a","sha512":"aacea6ee9d9b0eccc1670d80af09ef95f38e2bb098f0b8ecb40b794cd98b3909936e2116d6ff6561eac50608f621a2601ef320a23f5ead6f83181425957acd44","ssdeep":"768:7cfHxGPymCMqGpofV0K4bLO1uCzRPzTWprI8yrwkXrV9cBR8yFySNyi0:QZMPytYbnCzlqpr+59YFy1i0","tlshash":"e4f2f1180e54674f4aa9aaca029c74aae576a05b8743d077335c9bc8fee24b1437f1d4","first_seen":"2026-02-20T03:33:20.618197Z","last_seen":"2026-08-10T09:46:40.960869Z","times_seen":7753,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/payment?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=y6hk9","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /payment?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\u0026_rsc=y6hk9 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22delivery%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nnext-url: /delivery\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: text/x-component\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: same-origin, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), usb=(), bluetooth()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: ASP.NET\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: no-store, no-cache, must-revalidate, private\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet, noimageindex, noindex, nofollow\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BavVsQSjHO2krAbAIFRFzPoH9QuPMkXeB7NuEFKNTPbbABclhc8GyxEiazjsWeDIpgp0MFL3Jga5gTqKGDMZiHd%2BXBNsEVOwWIcvN5abwoRHyt3pfb%2Fib5XULgPLCbJvKys3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf268e94b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10699,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4459)","md5":"f34c5e2f657c68c65d0e94b0f5f9ad46","sha1":"cc4326dd5fbdf3ac7798e1dfb69d5aaf42ae5420","sha256":"55c325cbf16ef931fe259532c1aee649fb729017692c2b4b5e89137d28e671ff","sha512":"8576fe451639a1d2f1b3b4dbf1e3cb73ea412ada3131345fd6af6e0a6ad8e21c3b64ddae72798553ab3a0ba319b0c87e9a8984f968ef1cd9d4850c4f4ca199ae","ssdeep":"192:gjV0Mmp7OnWhYLvSLEnHYkyxm/DaJ0ueKY4KRTThh7gMfa7RXnNfkOMDwi:gjV3mROnW8R504","tlshash":"9422423f9b05dd3eaeb78984044fd31a928d473747705df6c6dd9d2807922261f8a392","first_seen":"2026-05-14T15:34:33.199953Z","last_seen":"2026-05-14T18:26:12.568823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/_next/static/chunks/911-4f5cba4381200ac3.js","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:39.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /_next/static/chunks/911-4f5cba4381200ac3.js HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:39 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"55dcd-19db29d6d35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B7WtcMrpDAWnro1iQaH82OTGvOoGhajjzES2qvE8kG2%2BcpczMbGDrfYxOZsQAgjxsYgycJ5gnneOxdFma0f7uUYzOX026AQhvC%2FS7fT%2FpPleI%2FOxlsaQWx4EDOHqiCg%2B9hcVUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf25ecd310b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351693,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65184), with no line terminators","md5":"82337e087fc66786e15cbaf016d3be3b","sha1":"b495a63932a6e7115538346690b7fcc690733660","sha256":"ab204e49fe2aa6ec3d1b7084b221c6a9213c663c06abfe4fe86670908be9ca5d","sha512":"8dfe9493ac17f82ebb1231964f4bf114d59194ca67f1208f8d3c1e6f031cec95e31538986c8860a646b083d7511cf4323bf5e19c071af6d6e2dd7585d92053f9","ssdeep":"12288:MDzV2pM5lrkSCFdXWn6Mh9CWiNQNC3btJDplqbuoDMX9oCNaGCJmeYM0p/99b0KR:MDYMkSCFQD/NC3bt/l","tlshash":"7684f88ed5c743bf4b9602e4a40cb7d933b981b74b8d5e3b4775ccb926b8d70a1a6900","first_seen":"2026-05-14T15:35:58.505992Z","last_seen":"2026-05-14T18:26:12.570585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/sec-init-g7/verify","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:40.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"POST /api/sec-init-g7/verify HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/\r\nContent-Type: application/json\r\nx-client-trace-id: edd6b15a-d5f0-4208-aeb8-9aae56f0c6e2\r\nx-req-ts: 1778783140644\r\nx-req-nonce: 571eb58f-c87d-47ef-a01f-187f03d3f6c4\r\nx-req-sig: 6ee594441e5e72cccc384faaa5ebbb35e6df5b851642014c04725d98cbabedf3\r\nContent-Length: 465\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":465,"data":"{\"id\":\"f337a0e6-2999-48bb-848b-def22c44a4bc\",\"nonce\":492,\"fingerprint\":{\"canvas\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIwAAAAsCAYAAAC33FDQAAAI8klEQVR4Xu2ZC3BcVRnHv3PubtKQ0pLk3kmTvUg69jFt6SsPi6hUkYHhURi0OFVwphZQi9YqFSgyAxQQRtHhYQujFooTFFofU6YMNtVScZRp2d222MSJjNI63d0m3Ltp2qTksXvP8X92s2nIbEwu3TTVOXdmZ+fu/c53vvM/v/\",\"audio\":44100,\"webgl\":\"unknown\",\"fonts\":16,\"screen\":{\"w\":1280,\"h\":1024},\"colorDepth\":24,\"touch\":0,\"languages\":2,\"tz\":\"UTC\",\"mouseEntropy\":4}}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 96\r\nx-ratelimit-reset: 60\r\nx-request-id: req-7q3\r\nx-client-trace-id: edd6b15a-d5f0-4208-aeb8-9aae56f0c6e2\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4aVFngDFxSwpVOyZ%2BadhPo4gHLNCBP%2Fx0hrocPduaYUKoWWE54j4jogMf3QP%2B794ViHKcNDo%2Bqzh2mCyYcSoLOlYuFT3wzruKKfMBaJXFQ3mMwtL6d6wz7R38C0HJNcI%2FykuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf2651d590b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c9a1962eb0b714bedb87b9866fbcf1c5","sha1":"8cc958b8a62531c9c6f9f02a7e5cf5c997d995c6","sha256":"f323f006b495f4e4ab2ab76d07bd51debd1308142e0e46eaec76a902c70f51e3","sha512":"e6f23ee2417be6ffd8d5767b40f44945fbee34d727dd96fae3ff18ec69081e3a55f99469b3db80e68061bd11b5a600e8a79158e772a05724eb7bcaf6ef57514c","ssdeep":"","tlshash":"5fd0223f0f2da664297244603a4e8c803d1cb82014a01c656dc488bc32cb5edb8082b3","first_seen":"2026-05-14T18:26:12.571787Z","last_seen":"2026-05-14T18:26:12.571787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/ups-logo.svg","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:41.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"GET /ups-logo.svg HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: no-referrer, strict-origin-when-cross-origin\r\ncontent-security-policy: frame-ancestors 'none';\r\nx-dns-prefetch-control: off\r\npermissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=(), autoplay=(), payment=(), usb=(), magnetometer=(), gyroscope=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-powered-by: \r\ncross-origin-opener-policy: same-origin-allow-popups\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 22 Apr 2026 00:35:54 GMT\r\netag: W/\"7eb-19db29d6d30\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-robots-tag: noindex, nofollow\r\nage: 10306\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJSmysdINFS5Rh5hz74ECWQlAT3RsRhz25Xj04b9XV9Zwy%2B7QJcNm0MpsrC20ElukhhVL%2FZ0upKSa1VocqIZcowTdnISnt%2FL8VK7m3XR2NLti8OZSVcnEayXite7sniReIb8gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbbf26939a10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2027,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7af10b443a8f054cf60f44437b854d3","sha1":"85f2c2e6427addba1b09886e3ced87e568734c53","sha256":"958ad034062a965d58d325b2cd11aef1b0623bd9a3229a0f4ba36f3e63fd52d1","sha512":"c8108492d1499958a49c1d201316cf1da95dabb12412414a884991d1ab01d646c9346b44786cc7e88eace36e182df8383128d95ba4aecc2a66c0a2137a6610a7","ssdeep":"","tlshash":"f941a5fd6b7013fc218e4b6fbf16e45ca54af1acb3e209c0c25a5923ea820046448850","first_seen":"2026-05-14T15:34:33.193695Z","last_seen":"2026-05-14T18:26:12.504864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e-worldreship.com/api/v-profile-t9","fqdn":"e-worldreship.com","domain":"e-worldreship.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://e-worldreship.com/","date":"2026-05-14T18:25:43.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e-worldreship.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 19:00:49 GMT","end":"Mon, 20 Jul 2026 19:00:48 GMT"},"fingerprint":{"sha1":"87:A7:98:4D:B8:A8:BC:9A:47:EE:6F:2B:AE:D6:17:6D:E0:08:A9:63","sha256":"66:45:24:E0:A9:BB:AE:D3:B6:CA:E8:73:30:83:A5:DB:39:1B:CE:03:02:C1:B9:9F:F4:EF:EC:DD:AC:74:83:06"}}},"request":{"raw":"POST /api/v-profile-t9 HTTP/1.1\r\nHost: e-worldreship.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://e-worldreship.com/delivery?sessionId=4969de4b-fcd6-4d3b-9fcd-17b5e4308143\r\nContent-Type: application/json\r\nContent-Length: 846\r\nOrigin: https://e-worldreship.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":846,"data":"{\"sessionId\":\"4969de4b-fcd6-4d3b-9fcd-17b5e4308143\",\"eventType\":\"fingerprint\",\"eventData\":\"{\\\"screenWidth\\\":1280,\\\"screenHeight\\\":1024,\\\"colorDepth\\\":24,\\\"pixelRatio\\\":1,\\\"timezone\\\":\\\"UTC\\\",\\\"timezoneOffset\\\":0,\\\"languages\\\":[\\\"en-US\\\",\\\"en\\\"],\\\"platform\\\":\\\"Win32\\\",\\\"hardwareConcurrency\\\":48,\\\"maxTouchPoints\\\":0,\\\"cookieEnabled\\\":true,\\\"doNotTrack\\\":\\\"1\\\",\\\"plugins\\\":[\\\"PDF Viewer\\\",\\\"Chrome PDF Viewer\\\",\\\"Chromium PDF Viewer\\\",\\\"Microsoft Edge PDF Viewer\\\",\\\"WebKit built-in PDF\\\"],\\\"canvasHash\\\":\\\"-hktyho\\\",\\\"webglVendor\\\":\\\"Mesa\\\",\\\"webglRenderer\\\":\\\"llvmpipe\\\",\\\"audioHash\\\":\\\"-Infinity\\\",\\\"webrtcSupport\\\":true,\\\"webrtcIPs\\\":[],\\\"connectionType\\\":\\\"unknown\\\",\\\"downlink\\\":0,\\\"batteryLevel\\\":null,\\\"batteryCharging\\\":null,\\\"localStorageAvailable\\\":true,\\\"sessionStorageAvailable\\\":true,\\\"indexedDBAvailable\\\":true}\",\"page\":\"/delivery\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 18:25:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0, 1; mode=block\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://e-worldreship.com\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 90\r\nx-ratelimit-reset: 57\r\nx-request-id: req-7q9\r\nx-robots-tag: noindex, nofollow\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZvRicnasIyD1gbOhNxTrCi3rAiQkCTMA5%2FG7eRPA%2FrYSRwXPpXfJ%2FehnQndzaTUsK6%2BiKDyFYhQ0dXdTrgnfGbGNOlDQsNvqBH1sikFdH9B%2FSrCYN6NuwDWZ8c0ee9%2Fx3uOsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbbf2749cc70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"28c3c56f055e2ce3df0e17355735d2fb","sha1":"684c1184a4e8b0557e7903961c3347a929dd03c9","sha256":"792dafb5067973f9cd542259795496858cc1d2ec0b2f1ff7065ef22e678b6b8e","sha512":"536918ec8c2f2e2c56256bcbb56f44b411f582fb2141c11eed4c5c685dccf50ab88cbf5e1075da430c3bd7e0055ae1c3044893a9ba1e36230ac4ec10ba173534","ssdeep":"","tlshash":"49b012038c75f2c1f5d86c2218b9ea59ccdbaaf04bb508e8b3ea25498c6000aba54330","first_seen":"2026-05-14T18:26:12.574218Z","last_seen":"2026-05-14T18:26:12.574218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-14","alert":"Phishing Block","trigger":"e-worldreship.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"e-worldreship.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}