{"report_id":"880c3709-3d63-4538-ab44-5d03d4ed2df7","version":6,"status":"done","tags":[],"date":"2026-01-10T14:24:14Z","url":{"schema":"http","addr":"worldqnt.top","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":0,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"worldqnt.top/","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"title":"WorldQuant","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"worldqnt.top","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":0,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T14:24:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-05T13:13:41.270215Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"worldqnt.top","ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":86,"request_count":43,"received_data":6599627,"sent_data":18996,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-01-05T09:03:01.851064Z","alert_count":0,"request_count":1,"received_data":56834,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"www.worldqnt.top","ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":6,"received_data":8180,"sent_data":3090,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-four-release_order-release_order~pages-index.a2c29b28.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b4d80b95864d578f30a75d71b7bbd48","sha1":"2ce561b39e596f30c18beb0f7434c4bbfaef218b","sha256":"3dbc59fb25961d172f2be26d1f870a5b38d4fb83c05ebd3428d7018ede7e6a88","sha512":"88cafcfd4d3887f41145910c09a5bfb32cb289685fc6af906d5f6cf7cab990314c51f5169d0c6b11531cfdc54c5a0ee0ce989accf74a10a1fbe37a8ea08d143b","ssdeep":"6144:Edm3Ib3vM9EQcrTPP3AUIF8AXNV7A21Pcl9FWpmrKtNg+9En4LkaRevK:0PPArfPKm++N/9En4XevK","tlshash":"c3b42a9cb284741602a76174047f190b92367909b40b8998fb79d9deadbc58f327bf3c","size":506664,"data":"","first_seen":"2026-01-10T14:22:10.917476Z","last_seen":"2026-02-12T21:55:12.347701Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-07-26T19:05:52.182772Z","times_seen":4602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/index.e6474c07.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf2222b9372baff2c09e2c4d34d7a293","sha1":"07e39dfb3e75c7aa7f585a2723bae6264bf0da5d","sha256":"9138025589f2d3ae1c9b507ad1e5a2f575c4ae80ddc58558a99b984df2bfe5d4","sha512":"42f7d56ce128d37762bb2bbf3738e3f20e59905f59d4887cab537ecd8cf966c0d1b2c82ce5735b673fffa7222d7cb48976617d6e3b32689e66cb8e620c099497","ssdeep":"12288:MXJZIdsAn7N1sfZaJDLQe+GABUim2QQC79At2YU7Ale:Mw3kyDLQe+bm2QQC2DWAle","tlshash":"1bc45b7335c8a4f82293852de04a3305e5fdad397b49bae5b3c069a483d2745d172fb2","size":591718,"data":"","first_seen":"2026-01-10T14:24:29.435604Z","last_seen":"2026-01-10T14:24:29.435604Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/chunk-vendors.5984aa24.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55196b3eaf61412de923c79189ce3b51","sha1":"9aaf99c97f9d7becfb29ca9b26b801e165dbc696","sha256":"e5540d1373c9fab6a57e08a9192dd94e190d494761dc2f95f50d202fb2b2c282","sha512":"c8be04205e44fcee03cc4f3b65872547387869b98b8e8d45a4036e692a5fa1156c5fbf02e31447c32db0d565c3e119293556981b3fe729fe2ffe9913996d3534","ssdeep":"12288:nBheiOzVzH0OOjia5RexJCge3knWX/Jamsk/oEfwKBkUCfXfscey:2DVzH0OOOa5gUkn0/JB/oJKaUuP+y","tlshash":"b1b51bc876d1b0a583a365a5402f500be33ead686c4c4454f767e8e36cb9a8d5237f3e","size":2306464,"data":"","first_seen":"2026-01-10T14:22:10.983963Z","last_seen":"2026-02-12T21:55:12.415009Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-five-index~pages-five-usdt-usdt~pages-five-wld-wld~pages-index.2e5de257.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c9e0f45e9815194b0d851e09af32b83","sha1":"6aaf08855e1a40fea80874e65b1c066cfc20a519","sha256":"00cea0234b843fcfde5d2b979d88b9df7fb75acf0c53c683212c4f280d266d6c","sha512":"337528b57344d045a704987bec4cde4e76474f50e70ba9f960649bb36351b2798a8a2b000d40c164a7e7230454b9f604ab05cf7f3cac89456114d26bd13c0d1b","ssdeep":"1536:Brj/rCrJrHrHErFcGrVrpdLUXEg/mDpGGcbTq1rPDYrqrVrIth0:Lj","tlshash":"b953f80a74c6b8670d23494846dd8528537c6f3f98a21c85f3f59adeca72b8e221ff15","size":65573,"data":"","first_seen":"2026-01-10T14:24:29.413123Z","last_seen":"2026-01-10T14:24:29.413123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-index.cd652d48.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e985aec181736544b60013d95684e08","sha1":"92b35010600b16525cf2e11ac297702e5b1730e0","sha256":"f018ca945a41d89a4bc7946a69f3a346fadf2a5032d78ad1298f8452c8818f25","sha512":"4b35d83f6570c1999f30af1df2cfecd05c89a5010828459d36ae5148fc860bc4ad3bf2d1b900dbd75f9ca1e310571516099456cfccdaff7fded46a1cbb37a77f","ssdeep":"6144:ngv2kutn6/5Q31BVZ7DASFZR4Mbm35FSlndMenQgAnTndMLnQg1n3fPjx/wzUz1F:p8gBxqAV4C8ErHY+huQftpteZPjK","tlshash":"c484f829708ff04e8d5b9152202b5e2490313e75a026d449e7facdb85ed5c9f2b2bf6c","size":375715,"data":"","first_seen":"2026-01-10T14:22:10.976089Z","last_seen":"2026-02-12T21:55:12.316551Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-index~pages-text-text.d582c895.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b8bc79ad2bca2b6d4c96bdcec2733c6","sha1":"4bd3ca9d3c091cb175b36aedec5123f7c7ed7cfd","sha256":"60059e4c8c6144a44029807ed59aed4c849559f59565b74dcdb8dbc3f400e908","sha512":"5e72208f5aa710fcdd1b8a4089caf4340f987866b80badc0cc7be2e8ce697a2625da39165276fec7f8c4c8786dc62efd1de1f541015c977d3d159dd43ae787b3","ssdeep":"6144:SuNZBBYLNmH6JRMS9LAF4fRVi6XI2+vTuaj:SuNZBwmH6JG6LxfRVi6XIjvTu+","tlshash":"5a746d8df2cab46602e31234146f110ea1377c166907e8a4f379f9d39e6994e327bb74","size":337485,"data":"","first_seen":"2026-01-10T14:22:10.946027Z","last_seen":"2026-02-12T21:55:12.396176Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-five-index~pages-index~pages-one-one_one-one_one.7fe1dfbe.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b35a79a1db41ef806798bcd080b7a09c","sha1":"55cbc05e191307e1d2e17aa6f4bc4eebf16a7f27","sha256":"39bb04acc1ba7c1fc05f2168d5149c9f5644ce85b2bb1ed8b030e7e0f4995f72","sha512":"9e7430e8d6eb5f9745a478869858bb0891726af514d49f51f9fd5427723cd935500dc6fb1231a4632d58d6cf95a7cfb1d78c912b2fd714fd5d90718519a42ee1","ssdeep":"12288:XW2rBCvIzaxfa+WISIobjVTM6wkCETqHEamsE:m2nzAcISIobjVTM6wkCETqkR","tlshash":"eb55e884b6d7f1ba438260a4142b200af33ead5cd44ca555f364e9f37db98c99a37b34","size":1312707,"data":"","first_seen":"2026-01-10T14:22:10.985963Z","last_seen":"2026-02-12T21:55:12.413246Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"worldqnt.top/static/index/5.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index/5.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-20e\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 526\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5003269020687157195\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"fdecb7c3c4c7295fa7a5ed38dc6f8ede","sha1":"537da795fd0f296eb2727b6bdf9252889b99e60e","sha256":"8889cd2e7364c9705ee2f800a3f077e471cd0c6754c993b06b9fe792f1e2cf12","sha512":"8e35cd90bbc95ce44a97ce9e958a072c120b9b4c55f12822423a0728c75b426cf256691c1c55eba3f632f57c5386511cb422aee641278eae74e4b836689bf9aa","ssdeep":"","tlshash":"19f0758032f914602a8fa1371235210b08236a2212b959be8939ec45b35170832cdbc3","first_seen":"2025-11-04T02:59:30.921079Z","last_seen":"2026-02-12T21:55:12.341406Z","times_seen":5,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":700,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/5.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/5.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-28245\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 157304\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 5479187149696972076\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":164421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 957 x 639, 8-bit/color RGBA, non-interlaced","md5":"353e16c879c42000818d8a803a1bc856","sha1":"b62a8b5927c1a2937f6e6379a61324a5b30aafa1","sha256":"d16e6e8d7a3adb6725b9f99654d0f5ed98eafc3048e638cdcdf9887d21de7833","sha512":"5fd925d9a28f6506250304738451acb809557dd35a62aa73cb9ea38f21fb33f1be02199a5c28300530f395ea637dec968f36bc3819626c54f74fc5790b58847a","ssdeep":"3072:n3CoJ1DnNQ+rr9xzaMO/1GTWScxjJxxAlwbjdD6ZeI1bSJY4s3cI:n3CoJ1DOg6YcxjalyZD6ZPAJscI","tlshash":"6af3020edd75a569f0ae8a1263933ce9f92054637b286c1e1b2165f3fccf864e435e12","first_seen":"2025-11-04T02:59:30.994605Z","last_seen":"2026-02-12T21:55:12.297659Z","times_seen":5,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/xrp.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/xrp.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1bd0\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 7148\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10829188461630355798\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"98c1f29526311d379978ed826db1a9f1","sha1":"a41f4ca0c165647f0fd41814f23ca4061f7c61c0","sha256":"73109d2f10981f0cd16226c73b45ab43fb8c36fcba8d886ec8db21e8d7dc480c","sha512":"5dee9bfc6dc8b83f54f3434a0d74bc307b0345f03f403edbdaf6133c3b6088d394421d33b90eed4e4b081bbfa1db69816cd8b002af02b0ee1e552ac207c1d180","ssdeep":"192:3XIxvkrgfg/W67znjeEnyXxLb0ZvgcZGS:nId27/WeKNxL+gcwS","tlshash":"a9e18d0ac252adb94e331eafba47ce517d26197a34468c4259b32364f2853c47e9b522","first_seen":"2025-11-04T02:59:30.935581Z","last_seen":"2026-02-12T21:55:12.398808Z","times_seen":5,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":161},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-five-index~pages-index~pages-one-one_one-one_one.7fe1dfbe.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:54.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/pages-five-index~pages-index~pages-one-one_one-one_one.7fe1dfbe.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1407c3\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:22 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:22 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872251\r\nContent-Length: 386462\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17022919622273887359\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1312707,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"a0d01b30ba879e97181fab12b878c144","sha1":"be94b94a4e018ccd935c2b0db41942279274aa9c","sha256":"1642b1c135df349706aa6267f0e89bf55329fea50038945a49bbb9f3d8744c34","sha512":"55f5231279304162a2169198a21647171e9b98fae7ce3247d0e92336b2767c1a96bc0cf70e5274813baa6e2c0deccee0566399ecfe8aabbd5748bb1496d0c640","ssdeep":"6144:fCb313Uw/LCRw7T2zVxRWMdBCvIAgVHw4OfaQZfCXISXtSjJmG9Ln0bjVT7XEULG:XW2rBCvIzaxfa+WISIobjVTM6i","tlshash":"c525d784b6d7f5ba438260a4103b200af33e699dd04ca155f364e9f379b9cc99b67b34","first_seen":"2026-01-10T14:22:10.955193Z","last_seen":"2026-02-12T21:55:12.345569Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2225171_8kdcwk4po24.ttf","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.177","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_2225171_8kdcwk4po24.ttf HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/octet-stream\r\ncontent-length: 55940\r\ndate: Fri, 02 Jan 2026 06:22:53 GMT\r\nx-oss-request-id: 6957643D5624273637A590C3\r\nvary: Origin\r\naccept-ranges: bytes\r\netag: \"B716002BF601F727176AE7901BDF4E4F\"\r\nlast-modified: Fri, 24 Dec 2021 20:51:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10201830100077572647\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: txYAK/YB9ycXaueQG99OTw==\r\nx-oss-server-time: 2\r\nvia: ens-cache6.l2de4[784,784,200-0,M], ens-cache28.l2de4[786,0], ens-cache8.se2[0,0,200-0,H], ens-cache9.se2[4,0]\r\nage: 720062\r\nali-swift-global-savetime: 1767334973\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 02 Jan 2026 06:22:53 GMT\r\nx-swift-cachetime: 31104000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9d17680550358846182e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55940,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh,            ","md5":"b716002bf601f727176ae7901bdf4e4f","sha1":"e87c1130c27fa42d822c198f5ea8b633b5118b94","sha256":"4bc8cc97559c0a52ea4f5ce0563e1bf3a7f89d660f74792e662e76d49eae4707","sha512":"cd4d86bc27a8055bf4ba21730991acb71e32d1d8c3176b6aada3c8fcfbaacfabe3cf1c813665b4434b16c757587d38afb8fd61f3a84a440053a96b545187e672","ssdeep":"768:00Yo6KrRwXJDv2mjQ5PMWCUPQnNqcoocj9MNb5+kYfcUFO++wEMjQYVEh/gG+VeV:xY1dCpj8+kYfcUUXwjjQYV8/gBVE","tlshash":"3c437c2b835e4fb3d16a86f90c4f011b5fefd7206636f99664ca5c1e4402afd085cb9a","first_seen":"2023-04-09T15:26:02Z","last_seen":"2026-07-25T15:02:36.308329Z","times_seen":3714,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":153,"dns":0,"connect":20,"send":0,"wait":47,"receive":30,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/services","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:57.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"POST /index/home/services HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 7997404414579931974\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"773b0b4de90dc73cc2382431ac96a44b","sha1":"faca1f868b4373f1c1e9f22a3914292a290527e3","sha256":"877deafaea243954e262f5bf119ac51d6145a630f0f5b45eb7b68801625c4304","sha512":"da5a7bc5216922a63399a5c9d4fe6d001403ed342721e7584767e4deeb6119bb9366206f7ae0793dc1546bccddc250ea7fc03e5285d1392568a4dd142be0b777","ssdeep":"","tlshash":"23f090fb32e56d684ae91adc385e787e908a702358d4b916054d8eb560785b154cf832","first_seen":"2026-01-10T14:22:10.922053Z","last_seen":"2026-01-10T14:24:29.389224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/headbgimg.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/headbgimg.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-692a\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 22660\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8288235397863226248\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26922,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 270, 8-bit/color RGBA, non-interlaced","md5":"cbae9ce7ad44dd2575d75298838fb669","sha1":"3fc60d0cc8ad357949105792f7809f33452bf88b","sha256":"da22a9d5873c50eaa63eb13af0ca31acaea43ddb323afa63e074547db160f9c5","sha512":"ec0a138f329b1c7d7c995ff5e7225a9030886410f269d6d60c7e085e740599053950015e3a4c36a316c11db66171e987f2ca45a4d4579e1de62f73ecbef10016","ssdeep":"768:2yNq7xb6z71HTrz4Q4JQle5ptmzDcpIn5qdA8b8:2yNab6z71HMQL+6n5wA8b8","tlshash":"5fc2ae7bc135a93fdcb5e335010a275929b4aece57beb84aa6d87e450b3dccd740600a","first_seen":"2025-11-04T02:59:31.003616Z","last_seen":"2026-02-12T21:55:12.407312Z","times_seen":5,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/1.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/1.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-824\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 2109\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10672312978315292251\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced","md5":"4b0366b170bf39512c966de581fabaa5","sha1":"196ef3668d5236a4b1e059d6f1df9382e05357c8","sha256":"3ac19b8aef9bb2c0f0efc14fbb7377ec87d3b5888199c86054708bd4dc3a564d","sha512":"0ffcd2de797ff7b1ed39503f9d2bbe73c6a76ba6ff26b986963c98725e9202a991d47e37bb275ce01b32b790e3d140d4161b92dc31af0a1f4b799d6b1b5d3499","ssdeep":"","tlshash":"e7411c41dd528f6391605c2f21d2d169ee7f5c27a8744f33b20a7df4da2530818ad613","first_seen":"2025-11-04T02:59:31.006055Z","last_seen":"2026-02-12T21:55:12.335574Z","times_seen":5,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/services","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:57.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"POST /index/home/services HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 1566484594545812710\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"773b0b4de90dc73cc2382431ac96a44b","sha1":"faca1f868b4373f1c1e9f22a3914292a290527e3","sha256":"877deafaea243954e262f5bf119ac51d6145a630f0f5b45eb7b68801625c4304","sha512":"da5a7bc5216922a63399a5c9d4fe6d001403ed342721e7584767e4deeb6119bb9366206f7ae0793dc1546bccddc250ea7fc03e5285d1392568a4dd142be0b777","ssdeep":"","tlshash":"23f090fb32e56d684ae91adc385e787e908a702358d4b916054d8eb560785b154cf832","first_seen":"2026-01-10T14:22:10.922053Z","last_seen":"2026-01-10T14:24:29.389224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-four-release_order-release_order~pages-index.a2c29b28.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:54.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/pages-four-release_order-release_order~pages-index.a2c29b28.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-7bb28\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:23 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:23 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872251\r\nContent-Length: 185104\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2129157444481081577\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":506664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61050), with no line terminators","md5":"3b4d80b95864d578f30a75d71b7bbd48","sha1":"2ce561b39e596f30c18beb0f7434c4bbfaef218b","sha256":"3dbc59fb25961d172f2be26d1f870a5b38d4fb83c05ebd3428d7018ede7e6a88","sha512":"88cafcfd4d3887f41145910c09a5bfb32cb289685fc6af906d5f6cf7cab990314c51f5169d0c6b11531cfdc54c5a0ee0ce989accf74a10a1fbe37a8ea08d143b","ssdeep":"6144:Edm3Ib3vM9EQcrTPP3AUIF8AXNV7A21Pcl9FWpmrKtNg+9En4LkaRevK:0PPArfPKm++N/9En4XevK","tlshash":"c3b42a9cb284741602a76174047f190b92367909b40b8998fb79d9deadbc58f327bf3c","first_seen":"2026-01-10T14:22:10.917476Z","last_seen":"2026-02-12T21:55:12.347701Z","times_seen":4,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-index.cd652d48.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:54.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/pages-index.cd652d48.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: \"6955063f-5bba3\"\r\nServer: nginx\r\nDate: Fri, 02 Jan 2026 08:49:24 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Fri, 02 Jan 2026 20:49:24 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 96510\r\nContent-Length: 79403\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11430625624383436291\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375715,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64920), with no line terminators","md5":"0e985aec181736544b60013d95684e08","sha1":"92b35010600b16525cf2e11ac297702e5b1730e0","sha256":"f018ca945a41d89a4bc7946a69f3a346fadf2a5032d78ad1298f8452c8818f25","sha512":"4b35d83f6570c1999f30af1df2cfecd05c89a5010828459d36ae5148fc860bc4ad3bf2d1b900dbd75f9ca1e310571516099456cfccdaff7fded46a1cbb37a77f","ssdeep":"6144:ngv2kutn6/5Q31BVZ7DASFZR4Mbm35FSlndMenQgAnTndMLnQg1n3fPjx/wzUz1F:p8gBxqAV4C8ErHY+huQftpteZPjK","tlshash":"c484f829708ff04e8d5b9152202b5e2490313e75a026d449e7facdb85ed5c9f2b2bf6c","first_seen":"2026-01-10T14:22:10.976089Z","last_seen":"2026-02-12T21:55:12.316551Z","times_seen":4,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":152,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/2.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/2.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-d5e\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 3450\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1489486610224434717\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"7a87ec293eaba07d3d64fb68d9530c1d","sha1":"33a5a1d19d67bd6ead7e8cf3382b57500287a0f5","sha256":"97c23257d2e8f8a5a5417ef5d3f6e1f508b9a4b3d2079c531bdc576b7d30f76d","sha512":"0028a2f6abd21f8adfd3bf48ecdf57315225d879d0f007a1105097b77365e965d62ff5644934231c4aad1b6f2c1ef46bfa096b472ede5deaea88bbfcf8c1679f","ssdeep":"","tlshash":"90616edf527b9d0798460f7e5798f473b65b0fc58c2c817c8222d62082408a448ad11b","first_seen":"2025-11-04T02:59:31.022943Z","last_seen":"2026-02-12T21:55:12.359273Z","times_seen":5,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/bnb.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/bnb.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1573\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 5519\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14979617580121781138\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"5157b8b6727e6e9175d7a4fba8ca870d","sha1":"cc6d4df9a793b595abfbcd763b8a0d6a0058c7bf","sha256":"52b02cf15c5232b5935d60c2df9c81d44da83f37242789e02e5640aea8b63d2d","sha512":"84e78368bbd394649e90b3edbd1a96889399f2dc9f8a9ef5f7d5d9a6927e7adebb365436b2d15cb21d2c9278a1bed509d202641a0d2026e0d9100162a1b7798b","ssdeep":"96:+wfyHffBfISY72UfFO+1pBNujlloldEsIUO0IslPq8P44jcAONk8XIHk0zV6y:qHBwStUM4NwwlfO0lSO1lUo","tlshash":"b0b17db2ea9bf26afd532aacde6d806db62210285343b1b522080686550570ad6a711f","first_seen":"2025-11-04T02:59:30.944045Z","last_seen":"2026-06-08T00:03:47.397573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/10.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/10.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-823\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 2108\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15480478489740125429\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2083,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"0cc3cd753211e3c8e238f8b48b81e1ee","sha1":"2f49bed21dea6fb4703465f936f8a6442a0d4bcb","sha256":"fb03f09786b825c634a10ffad31ce72d6332f0fdddc8f8a0bc14a03acbd5fa46","sha512":"fba50f4c94f13fdf7bf1528296e4a1a8cfa90e9d18e6ea8f91bfa83562bb6cca95e513adc990a05f8aabfb04ceb6180086e6938621f11ae15f5f4e82fe643848","ssdeep":"","tlshash":"d241f8db9aec9e9acc92141af32443fbb4ecc79ee00f5010919f5572579cf228895606","first_seen":"2025-11-04T02:59:30.938093Z","last_seen":"2026-06-08T00:03:47.464263Z","times_seen":6,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":543,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/index/1_s.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index/1_s.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-31f\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 799\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10040600906139116915\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"40821262f507ae6ea7a5bb3a94bdc47c","sha1":"cf412d5a9c1d84de0f78c34195edf1eb591a4c99","sha256":"748402c1f9a1dd96864bbeba142e9ad25f997ecf1e084de64109194075075662","sha512":"1f5511369c74846d054452afd78349c5f64e513553980b3c6d530edd88d801e909e9a880c973e65887df0e64fd8f30b0bf3f912407ba98c98cbb859cc8035ab0","ssdeep":"","tlshash":"5001baa6cf96bd35ecc7e07a6325494450b1fc17c2fcdc0d8e0048511082f8dd02c267","first_seen":"2025-11-04T02:59:31.018494Z","last_seen":"2026-02-12T21:55:12.410756Z","times_seen":5,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":542,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/arb.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/arb.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-3c49\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 15461\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3330613925499692337\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"048723eb7b70d368f7716ca879db3390","sha1":"cbafbee38b353dc40d668f4800c9cfb9d6bdce45","sha256":"0a76032ab3a68bbc1858acb91d5fce5158071837acc88249d8edead575dcb31f","sha512":"8874b4bbfc1a66ac8a6d9eb52fe9d418f3a2c71e5313eecb2a9b103a0a4a514b6308198ecfdeb324da7b695a712dec84cd9373202dc62a33854a040161f597b2","ssdeep":"384:9rD+/y/boA0WXI1xRgErbeHHCexlBF515sTlMpRq:VS/IbPXSdmHCeBF51QlM2","tlshash":"1f62d19374d5c6cb4760457af8a26b6460a62f71cfaaa00831828613ec67bb1f1b0e0c","first_seen":"2025-11-04T02:59:30.971052Z","last_seen":"2026-02-12T21:55:12.380322Z","times_seen":5,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":386,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/four/icon1.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/four/icon1.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1f7e\"\r\nServer: nginx\r\nDate: Fri, 09 Jan 2026 11:35:25 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Sun, 08 Feb 2026 11:35:25 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 96511\r\nContent-Length: 8085\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16479855845940683849\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8062,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"51db0d536febd89072c676f0035045db","sha1":"fa45cf9e1c8ecb5f3a056283f115211dae3d7122","sha256":"67bddd955b5905c0a066c49fba52ad2e1086bad713a4a7f8b631aa7f38aebf8a","sha512":"f65e8ee5e46cb1ba0b7e1879107201070494e511ae5ab3a357a0ad5f5a0ad5a1756c5f47518ff0e1dc592022a0b4ad89fa4554f4fb301b87a46789cfad0f1c5f","ssdeep":"192:HlI1iCakuzOcJAqYDegTG7aTN7poylPd7TMUZ:HlLCRWduJ7DMUZ","tlshash":"01f1bf5c61c69dbe321354b7f85e3a93ccb85c42c1736beba7c5d2c2094d72a108a27c","first_seen":"2025-11-04T02:59:30.926999Z","last_seen":"2026-02-12T21:55:12.37727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":405,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/wld.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/wld.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-fee\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 4101\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13500863461936808784\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"95f492efc3c2363a48d672af98197cda","sha1":"7fa081a534e1ab3533a6c7b52212e51d117418a6","sha256":"5593897742348ad15c059df952f434b9aa223924173a556bcd1ff70c06a168d5","sha512":"6d39cc3accd2db8001aa69ac80fcf6f8029172fa9afd8926ea18fe24310d98f81fc909ac486d92ef338a193b92acef27d186e7f0294ab3fc529f577baa6a5472","ssdeep":"","tlshash":"9b817dab36b6f9639252cd01c0754e9571a422491f1fc74209738226737decbb898f63","first_seen":"2025-11-04T02:59:31.00811Z","last_seen":"2026-02-12T21:55:12.325528Z","times_seen":5,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/8.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/8.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-980\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 2460\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16613905280977874242\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"6a9303bbf54275a9b1dde0d1cdbd125b","sha1":"fa54d7ca975db44b787b3b0ade68306305a76bfd","sha256":"d7a6c4cb15fa2de031f06365fa59c8f2e8d82edcdf235adb795d64706600b360","sha512":"8aaaa22915978ad134129a383d39d8a14adcb86390a5f151383500c808474581fccbb74a1ad014ddab58c15a7bf95550af5b745ca0a508dd9b62cfb196dff3f5","ssdeep":"","tlshash":"ce412bc3eb72978d6e6d993f17768a9cc83df2ada97a08f5cd49c17001052c875ba980","first_seen":"2025-11-04T02:59:31.01047Z","last_seen":"2026-06-08T00:03:47.451347Z","times_seen":6,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":539,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T14:23:50.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:18:18 GMT\r\nEtag: \"6955067a-30d\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:44 GMT\r\nContent-Type: text/html\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Length: 781\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15363856588052287425\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (500)","md5":"4b4c2ec31111cb95cb83a7e2de284826","sha1":"27d802a06f104171a3e1c3fa3167af2337865611","sha256":"5694bf8e08fa8c345b1261f7319d5365229f8ec4d1e4051b5a139b6d48ec64bd","sha512":"0a9f75bb363930ba5d9d3f7a6fc44f54b93afa1fd5e1030376bf6860a796c20415e2f53ff69f2a6c41ba51191e0df8c8b740bf6d0d56e51a06fee207f13d7ff7","ssdeep":"","tlshash":"4701fdc21c20f44c0720854220b2e61e8ad64ab5bd90dc603ccc6efc4be0b8ece2f810","first_seen":"2026-01-10T14:24:29.406236Z","last_seen":"2026-01-10T14:24:29.406236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3169,"timings":{"blocked":1510,"dns":988,"connect":149,"send":0,"wait":149,"receive":0,"ssl":371},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/index.e6474c07.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:52.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/index.e6474c07.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-90766\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:20 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:20 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872252\r\nContent-Length: 230239\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1290591228256505138\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":591718,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44684), with no line terminators","md5":"30b3d228eb25c045693d642b8d470dfd","sha1":"d3296e8da18594144b4d08d4570144e8a3e1a826","sha256":"1552d7424c848a645a016f52efd2c21d4b84ab853bb4fd6dc9d83fa7c5cc4b02","sha512":"7c20267a869167725072e3fdc75ea24454ad93d9da39477b5ae339f201b9dfd500af8cd2e2fe044e35b9c706aeaa6d786e9be3fdd13f55cf519bc548a2d2297b","ssdeep":"12288:MXJZIdsAn7N1sfZaJDLQe+GABUim2mroXzSVapVe+O:Mw3kyDLQe+bm29Xz1Te+O","tlshash":"1ed44d3331c460f426a7456af0493341acfced58a74cb8eae3d8976886d67c59172fb2","first_seen":"2026-01-10T14:24:29.408211Z","last_seen":"2026-01-10T14:24:29.408211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":153,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/4.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/4.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-6f2\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 1806\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 11776107988829489240\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"cb04cf1616c0b6a6b7b40c3d668af716","sha1":"abe9f803736322c9419efc7336523af242c2a2a7","sha256":"0117d980d3428275d67b44e92c8ef8eb84bcfed6f96f5d1523b9ee34919266ed","sha512":"29dca56d2f477bcf8ad828ec87734890d687f8f183fcc41d4abb9a099e7440bf92c260716bd73d6a8b353c538a8b4307e7ff7904238bbf0ad3be7f11b81a60f6","ssdeep":"","tlshash":"cd31e9f9679fc3e85df38638d0e19e2199674124d12699583f03c3e6be67e0309e5c81","first_seen":"2025-11-04T02:59:30.980418Z","last_seen":"2026-02-12T21:55:12.411839Z","times_seen":5,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/four/icon2.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/four/icon2.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-10d4\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 4336\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10576542839462985332\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"2f28f6b4ca226380dae7f220bf697e97","sha1":"684c70b6cf2d55e2c54713e9723ccb009446e1f6","sha256":"f61b5f820a875d098395a5efec5dac2c91dc4ec34ab09ac0d087ad4749d88f77","sha512":"8be82c7951e990bcc11f382df60d688131cbcedb123a12b272e7ddfb72a6476e2dad57b88ae141d251e3fcdd504b36ce30e16e1044d0a656a3308e8a3bc5cc65","ssdeep":"96:iX6FuiPpQLJIrnc6QSNRjoohxV5A6KobA:ibiPpQLGr2SNxhxTA6KobA","tlshash":"3d915e6d28930bb59dee8573d4c704c0427b68911652e05b9010e3e71596a0de982fda","first_seen":"2025-11-04T02:59:31.016601Z","last_seen":"2026-02-12T21:55:12.404263Z","times_seen":5,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":399,"dns":0,"connect":0,"send":0,"wait":151,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 14:23:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sat, 10 Jan 2026 15:23:56 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQg2liYPy2pwS/A0yFAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-07-26T19:05:52.177038Z","times_seen":17486,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":1,"connect":236,"send":0,"wait":236,"receive":0,"ssl":294},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/notice","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"OPTIONS /index/home/notice HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://worldqnt.top/\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: text/html; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 6156406587059042945\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"very short file (no magic)","md5":"7215ee9c7d9dc229d2921a40e899ec5f","sha1":"b858cb282617fb0956d960215c8e84d1ccf909c6","sha256":"36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068","sha512":"f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-07-26T17:43:43.880054Z","times_seen":39340,"resource_available":true,"data":null}},"time_used":4391,"timings":{"blocked":1971,"dns":1213,"connect":149,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/services","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"OPTIONS /index/home/services HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://worldqnt.top/\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 2522825345509032514\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"773b0b4de90dc73cc2382431ac96a44b","sha1":"faca1f868b4373f1c1e9f22a3914292a290527e3","sha256":"877deafaea243954e262f5bf119ac51d6145a630f0f5b45eb7b68801625c4304","sha512":"da5a7bc5216922a63399a5c9d4fe6d001403ed342721e7584767e4deeb6119bb9366206f7ae0793dc1546bccddc250ea7fc03e5285d1392568a4dd142be0b777","ssdeep":"","tlshash":"23f090fb32e56d684ae91adc385e787e908a702358d4b916054d8eb560785b154cf832","first_seen":"2026-01-10T14:22:10.922053Z","last_seen":"2026-01-10T14:24:29.389224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3399,"timings":{"blocked":1212,"dns":1212,"connect":146,"send":0,"wait":456,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-five-index~pages-five-usdt-usdt~pages-five-wld-wld~pages-index.2e5de257.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:54.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/pages-five-index~pages-five-usdt-usdt~pages-five-wld-wld~pages-index.2e5de257.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-10025\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:22 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:22 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872252\r\nContent-Length: 10804\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 384209906179874508\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65573,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58584), with no line terminators","md5":"1c9e0f45e9815194b0d851e09af32b83","sha1":"6aaf08855e1a40fea80874e65b1c066cfc20a519","sha256":"00cea0234b843fcfde5d2b979d88b9df7fb75acf0c53c683212c4f280d266d6c","sha512":"337528b57344d045a704987bec4cde4e76474f50e70ba9f960649bb36351b2798a8a2b000d40c164a7e7230454b9f604ab05cf7f3cac89456114d26bd13c0d1b","ssdeep":"1536:Brj/rCrJrHrHErFcGrVrpdLUXEg/mDpGGcbTq1rPDYrqrVrIth0:Lj","tlshash":"b953f80a74c6b8670d23494846dd8528537c6f3f98a21c85f3f59adeca72b8e221ff15","first_seen":"2026-01-10T14:24:29.413123Z","last_seen":"2026-01-10T14:24:29.413123Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/ada.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/ada.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1753\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872111\r\nContent-Length: 5999\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 16720320951010983777\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 84, 8-bit/color RGBA, non-interlaced","md5":"c83549e8892dd6ee0b769fdcc298e3c1","sha1":"17f8d9bc275a281d010e8295f263ef519ef1aa7c","sha256":"f90b1d2c959a66492a0731538075370117d319d4955bd77e7a50471686b9fbf4","sha512":"e2d5c5f58e9cddae94da73825614f9525843134ed126eb3054401da54ddca7a5d587d50c9b82b94f3510768bd5744ac06091d624d5a4ec0b48b5126b39c65e07","ssdeep":"96:pDWfXq7UYs8lfnyG4K8b4WWHwktDB7RGbhqrcQ/e:qXqoulfR4K8ertDBsbhqr/e","tlshash":"61c16d2d8e66bf6d6bd4d736608c0cec00a04a42afe3812d7f41a17e9ed528bbb08511","first_seen":"2025-11-04T02:59:31.01247Z","last_seen":"2026-02-12T21:55:12.402409Z","times_seen":5,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/chunk-vendors.5984aa24.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:52.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/chunk-vendors.5984aa24.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-2331a0\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:20 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:20 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872252\r\nContent-Length: 772789\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1984935570178993655\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2306464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46754)","md5":"8c6709a27ad02513332e03964708117c","sha1":"533d368a5b1d491252413acc126b9771f1d21083","sha256":"954618efc8d08fcd40830a71a693748531ffaefc866301b6334ecc9b60cd755f","sha512":"fc16c98b9f89712ff9a414fabf606e012ff864bc3f955b2b91fc7f9cb0c10024c05914e941ef0301733fa72c1cccf320de580199756ffb14e0e845050c2f4e5e","ssdeep":"6144:ZBzl/hewLOwSVHTld0b4DOPLYA5vmhjd400Ke5nRCVi+foc9vCger:nBheiOzVzH0OOjia5RexJCger","tlshash":"3e2516cc7682f06647e321b8403f210bb27b2a68a80d8498f676d4d56d79d8e5237f7d","first_seen":"2026-01-10T14:22:10.925167Z","last_seen":"2026-02-12T21:55:12.290425Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1446,"timings":{"blocked":306,"dns":1,"connect":151,"send":0,"wait":158,"receive":672,"ssl":155},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/index/2.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index/2.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-352\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 850\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9180493730446705936\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"50e56880e33e85aae8d17daec57cd64e","sha1":"c89224faa51b7f218093604758d537077a12bff9","sha256":"4e507d79f98067838bb4fd4ed990533414aad5f1fc4163fe2f303b309c3dc83d","sha512":"ea56c3014b1a94f571e19db3cd5d03c20e3e23498ac7acb0adf9dd4206a1f6941b58a2d509cbea20f6621ab56111109ab0ea60169c1ac2861f6fed40ecffefe5","ssdeep":"","tlshash":"4f0196e80ccd46984a35d1228a9b2106d8a131bc42a4d329700e686e87bd17de8d561a","first_seen":"2025-11-04T02:59:31.028853Z","last_seen":"2026-02-12T21:55:12.339264Z","times_seen":5,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":541,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/index/4.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index/4.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-33b\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 827\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 10167403341828556836\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"977297149e72ae75e262c8e33cb9a954","sha1":"cf50a449e57a3fb76c4bf5089dc9dcf0a52d70b1","sha256":"4217b54b01edc7f6d036e4c6a5c28f53bb01567c2dcf96afaf78309c107ef92f","sha512":"e297d9cc13dc559138c61dd1690e4b6411b5ea30543556e351eb966235724be271189ab15e915c12ad4134c57a79e26668fd63fdc0f5a30e78cc17782f94c30d","ssdeep":"","tlshash":"9f0152e9c382843e88825ce2c8592761968e6173872327ac1e01fe2c8c1ca0e456d355","first_seen":"2025-11-04T02:59:30.940962Z","last_seen":"2026-02-12T21:55:12.387646Z","times_seen":5,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":685,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/notice","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:57.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"POST /index/home/notice HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 34\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"type\":\"notice\",\"lang\":\"English\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 8520587653101883369\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3228,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42632a3bae0b27afa340baf435f1dea0","sha1":"96650df8dca2f77fa4c55710a2c011a892f368e1","sha256":"b571d0a27348c6e5dadf8b31460379ea4a3b55fd0a753261801834279e170931","sha512":"ddeff9b855427bfd4187a95e9b6a4c7b09b19936a4165f9ae779f38df7d5bd61102fb9a162b0150b156c2309e1065ebb277316fe9ae2cf1a47d062c2316c2c7f","ssdeep":"","tlshash":"d86188bfbb6575e8c8020e8aa31599c768035e6541bdbfddc8e6bb34124640076a34f7","first_seen":"2026-01-10T14:22:10.966023Z","last_seen":"2026-02-12T21:55:12.285604Z","times_seen":4,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/btc.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/btc.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-171d\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 5945\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13041666185247895745\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"27627c07b911f8c7aeda04c6fb9f45fc","sha1":"a075252aefa7a176c692ed365008ea50b141f109","sha256":"0acb356744897dd83471b34ab2572ea196284d95c5ae512dd8510a1482b2ce50","sha512":"777d9fdfca70cb7f9bfa068ec827652eff2c5db09b970d1bef771072bf5683a75c40e95a035a37e85f821a6c842f41355b8c849e066ab32271ab9716eaee55b0","ssdeep":"96:+GimEp+Hzkx9p7umnehJ17w/2jYPyWcQf1gLn1Jhc69JZ3QoiVXWTJFRMC1:/EwHzsumehEOYqyWLnNcmgoiA","tlshash":"1bc18deb1406439e4d0a99633e12a2dbaba2041502f71f45a6a37f013db5b1ff4c7e72","first_seen":"2025-11-04T02:59:31.035815Z","last_seen":"2026-06-08T00:03:47.580737Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/pepe.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/pepe.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-2f84\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872111\r\nContent-Length: 12192\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3534364475102518229\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"ae092b25ea92ead4a7065c36fb540afe","sha1":"b42ff341c96295466f5d17689a59ddca8f0cad56","sha256":"154380c23cc0bd276c2751b2b9798ca7cfff524383884eb1f0015dfb04c7f80d","sha512":"9534b5ec9d3907f6b7f28eecaab32454eb947c036ce21e706e2b9c86a4a66e782cb38a77ad38ad785dd9f02e166d35e672a97a7848079d31855d34626a8d3ff8","ssdeep":"192:IwUil5Tagt4jpdg/+qFj1PR5wM5Y7p9dTDMrIuOl3W9oyJm8NfKAbGVcN:zUgagt4FypjPpY7FUE5ryJzfhSm","tlshash":"4242bf7775d46521ffd2234943ee9e7c4c3610d82a7a09b9e08b4ebc7d5869106bc38e","first_seen":"2025-11-04T02:59:30.949963Z","last_seen":"2026-06-08T00:03:47.514472Z","times_seen":6,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/index/3.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index/3.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-24d\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 589\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 1812955711219854986\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"f0df5e9229a637e90743ffae8c38dd35","sha1":"b5095f7f3ec9907c3ff0c214acc949c5ee8840cf","sha256":"55c0ed4cf21e115ae0d47f3dd1294bf68ff749d5fbb139dadbfbfebe27ec6ff4","sha512":"1adfc46b4852b311b8804c6c49024a2cb40cdacf76ec89dcbc988010bf2ac4fb235ed626f6892d14c0999b5286ba4e6a4881854d0f1065b6133aeaab52ae1843","ssdeep":"","tlshash":"5ef0475307b6575f8fd1415f59b5091188f420556718eb092cdf5831494341a4946211","first_seen":"2025-11-04T02:59:31.037729Z","last_seen":"2026-02-12T21:55:12.389422Z","times_seen":5,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/eth.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/eth.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1437\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872111\r\nContent-Length: 5203\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8410520543120913123\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"94b5de486bee96ca6830d4d6a43355a2","sha1":"dbfada55352f9eeb5366dd623f88fe0f7939277c","sha256":"684950a963c5291c8b13deee6ff638c760c31846dae94d0a8f87ebff18506817","sha512":"80e1915e907b7db44bd46afadc456401cd5db2a20efeb5d1e1733b18cd876ccea89013b30a3b699a047455fedde32aa5cc491bd13b27836a70a3066b5dcbbec4","ssdeep":"96:+BNwgCURP9Xo15YbunATxPulmrKuo4PxNGqLmjhMtpCgew4VXC:sCUVM5YbunAbKuFLG4mF2Cg14VXC","tlshash":"22b19f17b3fd944edb769571013da6f825c2947e059ac56ce7b1303d00e6a84b0d386d","first_seen":"2025-11-04T02:59:30.98445Z","last_seen":"2026-06-08T00:03:47.517319Z","times_seen":6,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":150,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/two/twobj11.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/two/twobj11.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-a1e57\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 663350\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 13161232073360336440\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":663127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1050 x 540, 8-bit/color RGBA, non-interlaced","md5":"5e96f83f075e6fe8797519c64606ddaa","sha1":"386f754eaea725bb0c9d04833ba02b73ec18ddc5","sha256":"43127b1abfea794964ecd32e1e1c061c439da4bed9e40dbaeeaa12aa43ada93f","sha512":"6444f3a3bffd28c7c001bb24e896f82a6c9730f150b6e2e12a9c8b75a7d5ccf2659d7bc2bffdb03bd877861e91c4400558790eb6c3d372fceb265365a182405a","ssdeep":"12288:LVejUksoNW8XilKbn85161BbRs9hTyiyigkOKODcuI9Hppl5HDPrguBpeK:LAjUksoN5bn46bqLHOauI9JplVDUuB5","tlshash":"31e433d043edc47cc956f2422acb9b75a40d634aeea374ffc96b10e2c1d155c6d2b2a8","first_seen":"2025-11-04T02:59:30.986646Z","last_seen":"2026-02-12T21:55:12.304408Z","times_seen":5,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":155,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/index.2da1efab.css","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:52.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-178f9\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:20 GMT\r\nContent-Type: text/css\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:20 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872252\r\nContent-Length: 29733\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 14340046963406714732\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-07-26T19:05:52.169682Z","times_seen":6380,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/js/pages-index~pages-text-text.d582c895.js","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:54.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/js/pages-index~pages-text-text.d582c895.js HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-5264d\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:06:22 GMT\r\nContent-Type: application/javascript\r\nVary: Accept-Encoding\r\nExpires: Thu, 01 Jan 2026 00:06:22 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=43200\r\nAge: 872252\r\nContent-Length: 106251\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 3348244503932748466\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":337485,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64750), with no line terminators","md5":"f5eb32afa4a8574db7733b6e79183e56","sha1":"e1c9cadaa63fb63e80fa0314c875867b4319619f","sha256":"4c4ed48f597a01ca11e0ba04fc9b8a55ca8b03ac44183f501f8b89eb4bb9d98a","sha512":"b2d9ea930092cae483ef2462584919b9566a19c0ff656d5ad5076bf88ae071cb885e0c447ea9c1279845679a2a953a7636c732862ef98f4d822ad2e9eac10ccd","ssdeep":"6144:SuNZBBY12mNmH6JRMS9LAF4fRVi6XI2+vTuaj:SuNZB62umH6JG6LxfRVi6XIjvTu+","tlshash":"b6747d8df2cab46602e31234185f110e61377c16690be8a4f379f9d39e6994e327bb74","first_seen":"2026-01-10T14:24:29.423015Z","last_seen":"2026-01-10T14:24:29.423015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":150,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/6.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/6.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1493\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 5295\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12155902687725411058\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 113, 8-bit/color RGBA, non-interlaced","md5":"58184898bc1cee76bcd2210b5ea3838b","sha1":"fbf46235a3a5a1269ef93d43e8caa74e4ac9d6b3","sha256":"5ac588bfe477a5254bb74d47debc0d8080be648772d158981558e81a6debfeb2","sha512":"912a873256cf54d70fb1e6150237e61015f6d2219baef2899a5c302fff1e9f71ae8500a47768c493e6d8ad1c45618a383785549e577adb0c92db2fd4942e85d9","ssdeep":"96:Y86R39pd5lzklOokLHDhmvw4/pS9tGlMpc92E0mUOXlRx0A:Y73bLzMzkLjzCOIwmUut","tlshash":"3bb19ec9f79ba7d681bfe40e51b2025c9b700bd17819d20a86b033c80e7369561f16c9","first_seen":"2025-11-04T02:59:31.032247Z","last_seen":"2026-02-12T21:55:12.408535Z","times_seen":5,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/em.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/em.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-fd5\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 4076\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7147760921200436941\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced","md5":"254d2ad2e082f9a2b711d72b399959d1","sha1":"1ded72cec684db03f039540a5ef24695672873ba","sha256":"89411fb619f0692206a0dbb43c047d718f83daa24f684f215d1887ab5748375c","sha512":"a97e0fa74b3d81064e6b40b7f9938be645b2c20e991f81b4d71598ef73b885e424e00046747375db71b0e0b36640cca4c47d0ea9a27bcadee87138eae2f397a7","ssdeep":"","tlshash":"0d817fdec06547b892f12cbb546b3d53ac9300876675b7144bb343025b1cf8d89709ce","first_seen":"2025-11-04T02:59:30.978391Z","last_seen":"2026-06-08T00:03:47.568893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":544,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/favicon.ico","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:53.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:14:53 GMT\r\nEtag: \"695505ad-10be\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 11:51:37 GMT\r\nContent-Type: image/x-icon\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Length: 4286\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 8273408831570521404\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"e3ed25cb7ec31ac29291e7669b09f278","sha1":"14f76f85293e19779df7bbde1057e95dd0b79744","sha256":"f09498858ddd6723f6d4148329d4c996ff7d5f7d24299fe5d146d19bd3fafc0a","sha512":"423afacfdc557e794857097056a3a1b7710bef6925b4928031139747fc56245e951e7cca6f66847d5689fc41fd34bda8db9f5a3f0d75a658c75d51405a2cd625","ssdeep":"24:suXDCPRUZYabjY4+kFUFr2e4uTya/jyfz/GGaUux:wPRMXnoIeT0aGaU","tlshash":"3f910bc09f8cee74d0659affbf920d68a29b0c3913dd08cbd46682b5146a0340d5448f","first_seen":"2025-11-04T02:59:31.026983Z","last_seen":"2026-02-12T21:55:12.31357Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/7.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/7.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-898\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 2228\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2195308468164086416\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"c04e3ff8cfda16d87a87a08a485439f0","sha1":"547ff399f96fb86a70523c1fa6229031244f92cd","sha256":"fc842091fbfdebb06a0719ba67f9ba89521bf94893422556ad6571fd05a2505e","sha512":"4c8348d9d2eefe825e4dab76edc1dc4b9b993555f13ec1667637d5c8b1f03198d5e94fb6727aa322076d2fe3cb5a7b4697a7a9b6ac95961815348383681010fc","ssdeep":"","tlshash":"2d41d6b52bda9276fcb64d2040fa44b6d54833154c20274cda2aa099cbb97e0e8cd6f2","first_seen":"2025-11-04T02:59:30.915218Z","last_seen":"2026-06-08T00:03:47.596177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/doge.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/doge.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-276e\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:47 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:47 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872108\r\nContent-Length: 10094\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 9530420806703631785\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"e93a5a0d37810db18b0ce2b91ebce148","sha1":"fe07b4c89efd2874f5f0468116f0b450310b8711","sha256":"4aed3d8fdb0d6e2560353680b2dc6703e57c04ce8c1fcbc3438cff8b564aa297","sha512":"3495f3627c9aac057f39c80a70a5c363128df6ea15b903c404a4940508ff8760d6b6d2aa246eed8035a36f412667907fdf2f103fdc9e7002a37b31ac9dcd5e94","ssdeep":"192:rgTMDaXc/qf6SHoF8dMucjaqwd3CUsFRg+pA9PHt0VgiJhg67A8waaG:cMU6FFomjm3CRFRHguY8waaG","tlshash":"be22bfb16d990df7d126828f5fbe321f941840031e9769b7468d271e4871f8aef69823","first_seen":"2025-11-04T02:59:31.014685Z","last_seen":"2026-06-08T00:03:47.560529Z","times_seen":6,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/four/icon3.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/four/icon3.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-f48\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 3935\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 2369948340581349463\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"fb5e10c5bcccf06f55beaa97aefcc9a0","sha1":"4f33b46a1736f7156e3403cc5d50dd30daa16a66","sha256":"76776d6386eadf77f7a9e88e725073dd6c8fb98a50981526fd1071583d73814e","sha512":"79dc39df910fe7374fb343841b7464b18d99a57b80d62def5c06c82493dc6adf59d0d17483e3136dd8c054e17c9f77b3ca40f9f032f873ec9d690e9c60698eab","ssdeep":"","tlshash":"98818dcdf2e41418d601bb36cce1c4ad02b057895cbcaeddc608b5b6d1da28005eeb9e","first_seen":"2025-11-04T02:59:30.999728Z","last_seen":"2026-02-12T21:55:12.385419Z","times_seen":5,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":396,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/four/icon6.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/four/icon6.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-657\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 1651\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15820299242826959909\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 68, 8-bit/color RGBA, non-interlaced","md5":"8970f1ea0e780ee8df48f5983a932df4","sha1":"2a2f6f4b2b101d8e9e130a2a0aaee55e8d183e03","sha256":"475792e01919a58a8e0988f59297d9b7b896e17192a28a2d35e8ee4a05935523","sha512":"1dadf10e8906915257ff3c76afa6e355f344f8bc01a786274b8a0b06e830536f0168aaa12b92e320cfe9797c48e192092334c55c195ca2d5df7c3ea95c8426c8","ssdeep":"","tlshash":"4931e87e1628182b3a8a16c88db3872077ecead08a546046a6ed633fb50d9396b41952","first_seen":"2025-11-04T02:59:30.996529Z","last_seen":"2026-02-12T21:55:12.406259Z","times_seen":5,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.worldqnt.top/index/home/services","fqdn":"www.worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:EF:55:FA:16:29:7A:E1:E4:14:A2:71:63:00:1C:E8:FA:30:3C:20","sha256":"76:CB:28:A6:BE:A7:25:D2:03:68:AD:D0:1F:E7:5E:9B:DD:69:AE:BF:0F:7D:99:17:83:A0:2B:A0:4D:73:06:B9"}}},"request":{"raw":"OPTIONS /index/home/services HTTP/1.1\r\nHost: www.worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://worldqnt.top/\r\nOrigin: https://worldqnt.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 10 Jan 2026 14:23:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nAccess-Control-Allow-Methods: GET, POST, PUT\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nX-NWS-LOG-UUID: 7180437730134112554\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Miss\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"773b0b4de90dc73cc2382431ac96a44b","sha1":"faca1f868b4373f1c1e9f22a3914292a290527e3","sha256":"877deafaea243954e262f5bf119ac51d6145a630f0f5b45eb7b68801625c4304","sha512":"da5a7bc5216922a63399a5c9d4fe6d001403ed342721e7584767e4deeb6119bb9366206f7ae0793dc1546bccddc250ea7fc03e5285d1392568a4dd142be0b777","ssdeep":"","tlshash":"23f090fb32e56d684ae91adc385e787e908a702358d4b916054d8eb560785b154cf832","first_seen":"2026-01-10T14:22:10.922053Z","last_seen":"2026-01-10T14:24:29.389224Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3893,"timings":{"blocked":1724,"dns":1209,"connect":149,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"www.worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/11.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/11.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nEtag: \"6955063f-35d\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 861\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 7515753100762715194\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":861,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 33, 8-bit/color RGBA, non-interlaced","md5":"2ec99a2060c6a0118ef9dcdfbbfbb8c8","sha1":"4b97c5060b89df6216ba347ac48d81aab90991f7","sha256":"4b05aa13cf9e5204f1e5a8b8c1162c5b4fe5601f89661d8fb5c9085e0db5d6af","sha512":"3511e723cb426ae064d88631248a8f9f13dd6916b8c5190b2302e7051f5562eb8a55703c1c93152c51eea5d921b8bd86682feeaa30270def5032b418d33eea6e","ssdeep":"","tlshash":"761156d6ab323131894299f52aa2a439ed09a10261baf5deec978cdb01df0179886167","first_seen":"2025-11-04T02:59:31.034041Z","last_seen":"2026-06-08T00:03:47.548834Z","times_seen":6,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/one/12.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/one/12.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-567\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:43 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:43 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 1411\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 17646977759173089060\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 39, 8-bit/color RGBA, non-interlaced","md5":"f4f3775fb6293604fc028071e1fca8b8","sha1":"dc9834680523a43ab25e9619db5edb442d28ef46","sha256":"0af9230868d5353086c5d6c0dc4539abc9012d87319d30c28dbbe5a27ba1c546","sha512":"14e91b37d2ebb1f2f61957c1515b23f0378e7e4d83c9012d8c466a8910d00743f0a6b4a2f3089fe4df116855c267c0f60d5e51044f982ee4a1be59d14bdd0edb","ssdeep":"","tlshash":"8d2108cab8a9eef3498c1cd790259a30cc62fccd5e3d7a9cf920a9d5e670cd54180818","first_seen":"2025-11-04T02:59:30.982467Z","last_seen":"2026-06-08T00:03:47.558655Z","times_seen":6,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/icon/sol.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/icon/sol.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-1a22\"\r\nServer: nginx\r\nDate: Fri, 09 Jan 2026 11:35:25 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Sun, 08 Feb 2026 11:35:25 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 96510\r\nContent-Length: 6718\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 15335305894695201218\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"4cde258be80a7e2ca6491dd9da13364b","sha1":"2f7543322dac2dace31e606d32ee60e29b3f2066","sha256":"e44638672af94cafb4d7f15ba916e688eb311ce42ebf06259bcde811fbfaf386","sha512":"79f392c6ca1c57fdf2e43ff52435ad932d6a69ed7f3c47374bd06c5e1266b4b28228eee5cfc82b7978c3327823c6a23365851f88de1b637e417c70c5a2812b76","ssdeep":"192:D7eAHBjvQrSlNn6763xJu7hqbFTLVp54DJYDxAg/rt:PeY0Id6eXIhqbFTZpSYDxBrt","tlshash":"e5d1af715fa44b4277e469aac440ec1dac0124bb38d1556ea5059524f6073ecfebc3cd","first_seen":"2025-11-04T02:59:30.947145Z","last_seen":"2026-02-12T21:55:12.378904Z","times_seen":5,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldqnt.top/static/four/icon4.png","fqdn":"worldqnt.top","domain":"worldqnt.top","tld":"top"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://worldqnt.top/","date":"2026-01-10T14:23:55.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worldqnt.top","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:92:F5:79:B0:55:A2:DE:D8:5C:F3:84:BC:EF:85:BD:8C:64:A2:18","sha256":"2B:29:44:10:25:DE:FB:73:50:70:17:F5:69:50:1E:73:67:6B:F1:99:69:CC:54:1B:89:C4:AF:8B:C7:D6:AE:8C"}}},"request":{"raw":"GET /static/four/icon4.png HTTP/1.1\r\nHost: worldqnt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://worldqnt.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 31 Dec 2025 11:17:19 GMT\r\nContent-Encoding: gzip\r\nEtag: W/\"6955063f-826\"\r\nServer: nginx\r\nDate: Wed, 31 Dec 2025 12:08:44 GMT\r\nContent-Type: image/png\r\nVary: Accept-Encoding\r\nExpires: Fri, 30 Jan 2026 12:08:44 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nCache-Control: max-age=2592000\r\nAge: 872112\r\nContent-Length: 2111\r\nAccept-Ranges: bytes\r\nX-NWS-LOG-UUID: 12328764642809851802\r\nConnection: keep-alive\r\nX-Cache-Lookup: Cache Hit\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"4dcc5954545157d17fabbfade6585c4b","sha1":"ef39ead5703ea7bb0fd49e45c49b952adc8c6e1d","sha256":"485ba27685f08baac7ab25b69109a36d8ee7e7c88b6ad49bf4cf1660bf82a32a","sha512":"edee3f0647391edb1a8cf23b687c23744e1d972060858061be7c10a5ba8897ce3fb51a6936f0ab7a3ed581d6ef0833b1ecec9ac1f4cea4881d6b175fcc3b52d4","ssdeep":"","tlshash":"00413a411ff958f2cd0ad0660e9674f0c86b92a1198c530f934de2d2bca84caaa8144a","first_seen":"2025-11-04T02:59:31.001666Z","last_seen":"2026-02-12T21:55:12.330088Z","times_seen":5,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":395,"dns":0,"connect":0,"send":0,"wait":152,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"worldqnt.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}