{"report_id":"734d05e3-73de-4d75-9f80-f9de39d95db9","version":6,"status":"done","tags":[],"date":"2026-02-21T00:24:22Z","url":{"schema":"http","addr":"optionsuniverse.com","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"ip":{"addr":"173.254.30.34","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"optionsuniverse.com/","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"title":"Coming Soon","dom":{"size":1075,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"315d5d8cdf18eb98c70b0b1e09c0b6a5","sha1":"90e3e4764a23472dd5db3824587b6551199fbcb6","sha256":"a0cf5aa71bc4b73302ee21d822a2b2b97f66456dabc7b2b443a7f3d54e58de86","sha512":"e37a467710e1fdf6ce8c26bb7669595a4bf7cf0e63e14f4d523c5fdb4481f5d145d6ebb4dea8285a3376569b77bf0e609ebfd349aaff9201959f6727b470a86e","ssdeep":"","tlshash":"7811c00856e34107669bac121fa5b25426f3d453448ffd233a8dab84cfc926945e7b9c","dom_hash":"domhash029390b9a5aba26c7071d27b7c824792","first_seen":"2026-02-21T00:24:23.407828Z","last_seen":"2026-02-21T00:32:17.723454Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"optionsuniverse.com","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"ip":{"addr":"173.254.30.34","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T00:24:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"optionsuniverse.com","ip":{"addr":"173.254.30.34","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2012-01-31","domain_rank":0,"first_seen":"2026-02-20T17:32:10.765312Z","last_seen":"2026-02-20T17:32:10.765312Z","alert_count":4,"request_count":2,"received_data":2719,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"optionsuniverse.com/","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"ip":{"addr":"173.254.30.34","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5de359e56fab5d913690bd3523db9645","sha1":"99538b10ece636b86db349494ffae0b497293b20","sha256":"af3e60091b2cc1f08aefb91e04573ddb18cc58a4e38636a9374d09179b824085","sha512":"1db2a2918900e06c5a86631c879e73d3648fcb17649eb41d8c1a50bb930a8c24c944879c5db946a97be04e3f6d3db9164733c6d4a7cb240765b77e4083cca52d","ssdeep":"","tlshash":"95e0265cab97910b239f78534f0ea69412b34067a09a7d03356caf8c4fe926a41abd44","size":363,"data":"","first_seen":"2026-02-21T00:24:23.411943Z","last_seen":"2026-02-21T00:32:17.727176Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"optionsuniverse.com/","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"ip":{"addr":"173.254.30.34","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T00:22:40.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.optionsuniverse.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 03:56:29 GMT","end":"Sat, 18 Apr 2026 03:56:28 GMT"},"fingerprint":{"sha1":"AA:C0:7C:3A:BA:5B:7D:CE:81:20:8E:42:F0:D9:BB:5A:B5:34:5C:3B","sha256":"5A:12:B6:B3:6A:EA:E4:0D:CA:3A:00:DB:6A:26:E7:12:72:1B:43:1F:BF:2C:5D:B7:99:FF:B7:EB:AC:48:72:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: optionsuniverse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 549\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 21 Feb 2026 00:22:40 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4e14b61955c9205278c81970d142159f","sha1":"472adb18a36970836d930e7f355fac9c015ba384","sha256":"71a2b41c3b925ed8b288383088f5e259822adad662e720cf99ae5ce5cea95d81","sha512":"99a5b3130e459dcb1e40fb55dc908f65413a8764741d2bacd230ef5caed9790f3c80a3c11fb224739a9b747f478de0d11b9873977f5081c6c40542aab6f9ab50","ssdeep":"","tlshash":"0c11004856e34107628bac121fa5b25426b39453448ffd233acdf784cfc926945ebb8c","first_seen":"2026-02-21T00:24:23.410219Z","last_seen":"2026-02-21T00:32:17.72516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1100,"timings":{"blocked":471,"dns":161,"connect":151,"send":0,"wait":157,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optionsuniverse.com/favicon.ico","fqdn":"optionsuniverse.com","domain":"optionsuniverse.com","tld":"com"},"ip":{"addr":"173.254.30.34","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optionsuniverse.com/","date":"2026-02-21T00:22:40.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.optionsuniverse.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 03:56:29 GMT","end":"Sat, 18 Apr 2026 03:56:28 GMT"},"fingerprint":{"sha1":"AA:C0:7C:3A:BA:5B:7D:CE:81:20:8E:42:F0:D9:BB:5A:B5:34:5C:3B","sha256":"5A:12:B6:B3:6A:EA:E4:0D:CA:3A:00:DB:6A:26:E7:12:72:1B:43:1F:BF:2C:5D:B7:99:FF:B7:EB:AC:48:72:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: optionsuniverse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optionsuniverse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 08 Nov 2011 00:03:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1150\r\ncache-control: max-age=604800\r\nexpires: Sat, 28 Feb 2026 00:22:40 GMT\r\ncontent-type: image/x-icon\r\ndate: Sat, 21 Feb 2026 00:22:40 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"a21d5440a0deac93c33111dcf5f7eee2","sha1":"bba7ac59a110febb8da758d16baaa2887a6619a6","sha256":"f0ad9d7046924a3f231c85548fa9a3eed1d427a5c32df23418ee7c6c7389000c","sha512":"fa5b109926a5c3fb14ccaefce0fc08094f5e36f9808df2956eb32409927add449ec7bd52e2cc1c968567df058473a351ff8136a5b5d6a7d5be978efda81c1c12","ssdeep":"","tlshash":"a221c05b33904918f832913f60429aae978bfab12440c66505d1bc73bd2ac3b15431e9","first_seen":"2023-05-01T02:18:20Z","last_seen":"2026-07-11T10:37:16.975622Z","times_seen":104,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"optionsuniverse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}