{"report_id":"606ef21c-a5af-4bb9-bc39-31ea4244a280","version":6,"status":"done","tags":[],"date":"2026-02-11T12:54:15Z","url":{"schema":"http","addr":"wattagents.info","fqdn":"wattagents.info","domain":"wattagents.info","tld":"info"},"ip":{"addr":"185.214.74.190","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"wattagents.info/","fqdn":"wattagents.info","domain":"wattagents.info","tld":"info"},"title":"wattagents.info — Coming Soon","dom":{"size":951,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ddd145266ca69190c9c0f08519807af0","sha1":"f72b027854276f207e8a9689fa266dbd80605ae4","sha256":"08fac3732fd221997850cc9e02ae041e1d30f3dfa959ec49408351139c1d283b","sha512":"c8dec359bc682ceb59eb556fb50a58edb1918a535c1924447bf238be32fb29db3007a8a26eb574ef1c86b760a361cde834e3379a42249e8137d698dd2606bff4","ssdeep":"","tlshash":"b0110006a0620146e177c2301af1b3182a62484be6a7b5e0f19d4176dfc86d2a7f71cc","dom_hash":"domhashc5d550c2ddcf6884ea039995581f086d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wattagents.info","fqdn":"wattagents.info","domain":"wattagents.info","tld":"info"},"ip":{"addr":"185.214.74.190","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T12:54:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"wattagents.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"wattagents.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wattagents.info","ip":{"addr":"185.214.74.190","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-11T12:16:30.055685Z","last_seen":"2026-02-11T12:16:30.055686Z","alert_count":4,"request_count":2,"received_data":3052,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wattagents.info/","fqdn":"wattagents.info","domain":"wattagents.info","tld":"info"},"ip":{"addr":"185.214.74.190","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T12:53:53.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wattagents.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 22:09:20 GMT","end":"Wed, 06 May 2026 22:09:19 GMT"},"fingerprint":{"sha1":"AD:97:A0:BD:0C:93:68:F3:B9:C9:A8:BF:AA:72:86:DE:CE:4D:28:21","sha256":"D7:DE:E9:0F:9D:47:CC:CF:06:96:16:DF:1B:8F:43:9E:FD:FC:AD:FC:2E:C8:C1:19:1A:93:7E:E8:40:E8:0D:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wattagents.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 11 Feb 2026 12:53:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 558\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Feb 2026 23:07:20 GMT\r\nETag: \"42b-64a1bbc1ce226-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7d6cac92fc200ba4df008fa1c30ec72b","sha1":"22e63b4d49941a503186b5058eca29ef557abc94","sha256":"3b8abd8f37fcd870417acf36d67978aa19cafb90b76c00e01234c5e75bce2714","sha512":"4eb3b38b8c98535d5c97ea32642b5541c6e46437c076d49556aecde5b0765a26c3c31e40ead5e811964d80afccbe6018315881661c2cc4220d08605b987d2cab","ssdeep":"","tlshash":"d9110206a0710285d1a7c2211af1b3142a624587a59776e4f5ad4166dfc87d1a6fb2cc","first_seen":"2026-02-11T12:16:33.845152Z","last_seen":"2026-02-11T12:54:15.887041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":72,"dns":19,"connect":21,"send":0,"wait":21,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"wattagents.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"wattagents.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wattagents.info/favicon.ico","fqdn":"wattagents.info","domain":"wattagents.info","tld":"info"},"ip":{"addr":"185.214.74.190","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wattagents.info/","date":"2026-02-11T12:53:54.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wattagents.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Feb 2026 22:09:20 GMT","end":"Wed, 06 May 2026 22:09:19 GMT"},"fingerprint":{"sha1":"AD:97:A0:BD:0C:93:68:F3:B9:C9:A8:BF:AA:72:86:DE:CE:4D:28:21","sha256":"D7:DE:E9:0F:9D:47:CC:CF:06:96:16:DF:1B:8F:43:9E:FD:FC:AD:FC:2E:C8:C1:19:1A:93:7E:E8:40:E8:0D:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wattagents.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wattagents.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 11 Feb 2026 12:53:54 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Thu, 05 Feb 2026 23:07:20 GMT\r\nETag: W/\"58c-64a1bbc1cc2e6\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1420,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6cb2f312e3586cfe1942278592fd2e7e","sha1":"dad9ee6c63d9a068069e341fad21558432ae6031","sha256":"2bee286b67cd22ebc33f81795d467706988f4317dc5a7965e75f4bf3865f35fe","sha512":"413be66c7f50f8354fa48f85fdb8dfdbedc996df9abab60b0a37e52493e106e10e5e82676bee3e6236128779e1775f90a58cc2ec56dd4543e74c93c6fc834b3d","ssdeep":"","tlshash":"c421535e90620216c163ca343bf2b32cb912458be653a6d9b46c4516dfcd792a2fb3cc","first_seen":"2026-02-11T10:57:24.996251Z","last_seen":"2026-02-11T16:37:20.081132Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"wattagents.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"wattagents.info","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}