{"report_id":"f85b7d1a-376c-4ef4-ace1-09a7087e8fd3","version":6,"status":"done","tags":[],"date":"2025-10-13T01:36:16Z","url":{"schema":"http","addr":"worldcointrade.com/","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":0,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"worldcointrade.com/","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"title":"Diese Webseite befindet sich im Aufbau"},"submit":{"url":{"schema":"http","addr":"worldcointrade.com/","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":0,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T01:36:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"worldcointrade.com","ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2013-12-03","domain_rank":0,"first_seen":"2025-10-10T19:28:11.119466Z","last_seen":"2025-10-10T19:28:11.119467Z","alert_count":22,"request_count":11,"received_data":156071,"sent_data":4212,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/scripts.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3fdd2aec08516b88274fade9c81504a","sha1":"ee33854574e1c2da18ce9e263d66829f444b5242","sha256":"fde6efdb5a08f2e19847bc17976185a012fe921bf34bcf8626a20c983554212d","sha512":"f0a5b750a4dc8b2174d8e0ebabef0f56179400a1ce8ab101cdbd2dcd8b9d95bfcfba65e1e1b6dd4cdbdbb3c616d3abe698cab18a8767764129c667338ea82f70","ssdeep":"","tlshash":"c8f04c24acbe6c8d52b7a674247f31d0043d2533910447eff830709812ecb297314c9b","size":642,"data":"","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.029408Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/config.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77b688d93518eba822757828214e7b8","sha1":"6838ce1bd609e9160bc86c287c08b30d8acf0110","sha256":"6fbdf75e1208d864dd0954e67056917ff31e745c37308419fc01bd0e04c8abd8","sha512":"ca94c01fe07279c2351ac713af47f2c8c09e0f6f1cc6aa2743eef3e88f93475873b3c511dab6b345d91a129cb5ed7b41a9ea514e1bac590bfbdb7e3ffe6a9b5f","ssdeep":"","tlshash":"82f0ec002f9d0c1930d326a601399cc9e1fc6107820889ad9975f2f145e53a5ebf77d0","size":461,"data":"","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.024887Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/hero.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b9e1174b552260b3aab9dc24e15c008","sha1":"e1b8a6eb2e9cc54bda6065c87e04bc06fb2151cd","sha256":"f1f549984f00a66d04bbedba9f2d5f689acd9262f85cbbb81b9055a904f29fbc","sha512":"9dc4dbc242dff338608171b71c62b7e3df699b02bea69afbf62133741501f8e75e00a7fe4b0d3bf4971520c74516b5564688e03788844e4d2ed843534d877138","ssdeep":"192:ibdz78D4dSqZ2fLZ9lZcEOcmAcMs5s4uHP/Aer0tqZfW:YULZ9lZcEOcmDr+Ad","tlshash":"cbd12358abac2d5fa6b633a9843f63c5553c85716602946fbc6db3940cfc82ec337924","size":6583,"data":"","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.030268Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/plugins/plugins.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"01be0e15afa9444337973dc384f1e55e","sha1":"1ea504e9c71313780792c0f476617ede6f164334","sha256":"8bb1862ee3ae1888a4ece6735ddb5dd992d898584e4f698f1f9c7a975753d28e","sha512":"3ee759a9779f878a6f6b824fa91e06227d1a541c894421b3ca3eb7cfd88ba08a045dc574b5a0e60927eba2724e415e932b62e8c3c51bb5048b20fdcab3ce93f4","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7BpfWBZ2BJda4w9W3qG9a98x:v4J+OlfOhBppCW6G9a98Hr2+kI","tlshash":"ccb30ad9b3c6706287b734b851bf400bb177a89ab44c8960f0a5c9d47db4a4e613bf6c","size":108154,"data":"","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.028248Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"worldcointrade.com/config.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.480Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 254\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:36 GMT\r\nETag: \"1cd-62885dc8cf403-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d77b688d93518eba822757828214e7b8","sha1":"6838ce1bd609e9160bc86c287c08b30d8acf0110","sha256":"6fbdf75e1208d864dd0954e67056917ff31e745c37308419fc01bd0e04c8abd8","sha512":"ca94c01fe07279c2351ac713af47f2c8c09e0f6f1cc6aa2743eef3e88f93475873b3c511dab6b345d91a129cb5ed7b41a9ea514e1bac590bfbdb7e3ffe6a9b5f","ssdeep":"","tlshash":"82f0ec002f9d0c1930d326a601399cc9e1fc6107820889ad9975f2f145e53a5ebf77d0","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.024887Z","times_seen":76,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":21,"dns":1,"connect":26,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/scripts.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.483Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/js/scripts.js HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 332\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:34 GMT\r\nETag: \"282-62885dc74a557-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":642,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3fdd2aec08516b88274fade9c81504a","sha1":"ee33854574e1c2da18ce9e263d66829f444b5242","sha256":"fde6efdb5a08f2e19847bc17976185a012fe921bf34bcf8626a20c983554212d","sha512":"f0a5b750a4dc8b2174d8e0ebabef0f56179400a1ce8ab101cdbd2dcd8b9d95bfcfba65e1e1b6dd4cdbdbb3c616d3abe698cab18a8767764129c667338ea82f70","ssdeep":"","tlshash":"c8f04c24acbe6c8d52b7a674247f31d0043d2533910447eff830709812ecb297314c9b","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.029408Z","times_seen":77,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":19,"dns":0,"connect":27,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/fonts/1467899/0a09cead-64a7-40e9-9fbd-ffcb0c1e3590.woff2","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.560Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/fonts/1467899/0a09cead-64a7-40e9-9fbd-ffcb0c1e3590.woff2 HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Length: 15688\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:31 GMT\r\nETag: \"3d48-62885dc3fd1de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 7.-32506","md5":"d20c02e4aa7de93b132cd3965295df70","sha1":"72ae8ab236f7b65940b61e1f1378f9e4cd8e4cd3","sha256":"ff00e5423c3f948ce35d19dee0ecb5b0e07f53aa2499cdcc28feeff09ec6ac1d","sha512":"d5ef4e36df555bc2dbf449998682bf6774ad5527e3fe42d37197eec16c100d7d3836add4a65731b8bdf5a34b3e833df2601ac5abb7011177bffa52c1c8e597ee","ssdeep":"384:4eX5fXMuljQ/ZjZbr7tPzixVnTLtDF1h2e8bx+jVEBKdEPs:40cAjQxVbr7VzixVnTRj0Nx+jaPU","tlshash":"4a62c02cd76e370af2941d931ba9a8b3adc4390914963599c071a7bc3802353f6aa13c","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-08-04T09:32:06.031964Z","times_seen":76,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/favicon.ico","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 3454\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:31 GMT\r\nETag: \"d7e-62885dc461b3f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3454,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"92e4440929fbcda82b9ed7cb3f2aa994","sha1":"b856f0fe58bcd316f2202790e17769333f626296","sha256":"99f351db1bddb61743c3058391e5af2e8c3af8823ff6ecee42dbbdd39a101b1f","sha512":"57496eddbdae57b4705454e0b91a46d11faa697ae351f2f037229a27b7a873cf1339d74e2f550ddf90d252beb22d5c42ea339a8f001cd20a8a18a81b6e62238c","ssdeep":"","tlshash":"54616d220b9e72342db6c722d60485cb1a4be7f8959a75574424cf7c2404a29deed68b","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-08-04T09:32:06.032671Z","times_seen":76,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T01:35:54.320Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 894\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:30 GMT\r\nETag: \"87b-62885dc38ccfc-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (362)","md5":"a1524378c6316bbb94dab77e4bef9262","sha1":"a5d1ad891d74b53df67fd991bec4a2ca280b43dd","sha256":"72fa65769c580fab754ef130a819c561cb32498c2de57a0fa83a30369854f638","sha512":"1c76c8a729a2b6c85bf5f4e244958a1d1021162cccb38d2f96f02be841c3fa6f9d8836e8a8e2be45aac38d603ad074f806c2753946b934c19bc64eae328eed33","ssdeep":"","tlshash":"a14112118f8e88196073408769a1799599d9ef06df86c889b0bf05b91fe2dc08d6b97c","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-08-04T09:32:06.01922Z","times_seen":74,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":27,"dns":1,"connect":27,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/css/style.css","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.476Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 1377\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:35 GMT\r\nETag: \"16ba-62885dc82beba-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"856ad36710a75bec010034db86ab7b40","sha1":"aa060ce25a4f5f04f6a2a5826823719c94c95756","sha256":"b9344e0ccd81fce5f90a4a5699d732d1eb7e8f0d435f82490f816c67dadd8022","sha512":"a03f05c21755811c1980454f413ca35d1cdabf718a19b00efb81ce89114a00976e458c0c4cfbc51bec5fd3480d72f906341e51c37cd576d921f10795aaa172a5","ssdeep":"96:D2yencTiygV/xAnT5sBbsBiFX/sy+9u6MeLNd/y0NJ08E4Kk4z0l4slqm2A:5QcTiygV/iT5sBbsBiFXUy+9jLOa08Ew","tlshash":"19c1d26b1ee31c54791755781bdf1be82728a013a18edc793b8d7248cf8d5ac097278e","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-08-04T09:32:06.026701Z","times_seen":76,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/css/hero.css","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.478Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/css/hero.css HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: text/css\r\nContent-Length: 1649\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:34 GMT\r\nETag: \"2781-62885dc767247-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"71eec78c8129e38f3f47869dfef44280","sha1":"29b54f19e6d697397ce14585a15effce2b333490","sha256":"05adcd72b42e52757c29aab270266c0462a2798401eb9b1e4b6004fea7519368","sha512":"bb353413e76b2b6571d30acc29389e54a8779a3a0ee213db10b0aa4eba43a7df0c453b26f492abd9996839f4ac6eb07e6bf40c5817a7c6ebb1116f891dfd2c18","ssdeep":"192:ytkhlKBaaygxjf4DCZ6o250coKUJdfTmmWc499FEFgigGkpQdm:AaTm7XDrfcgm","tlshash":"d922b37766921408a56b8c141bda3bbc123ce013da09d8edf7ce334e5fc5b9952e2b49","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-08-04T09:32:06.023409Z","times_seen":77,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":23,"dns":1,"connect":27,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/hero.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/js/hero.js HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2161\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:32 GMT\r\nETag: \"19b7-62885dc4c31d8-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6583,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6b9e1174b552260b3aab9dc24e15c008","sha1":"e1b8a6eb2e9cc54bda6065c87e04bc06fb2151cd","sha256":"f1f549984f00a66d04bbedba9f2d5f689acd9262f85cbbb81b9055a904f29fbc","sha512":"9dc4dbc242dff338608171b71c62b7e3df699b02bea69afbf62133741501f8e75e00a7fe4b0d3bf4971520c74516b5564688e03788844e4d2ed843534d877138","ssdeep":"192:ibdz78D4dSqZ2fLZ9lZcEOcmAcMs5s4uHP/Aer0tqZfW:YULZ9lZcEOcmDr+Ad","tlshash":"cbd12358abac2d5fa6b633a9843f63c5553c85716602946fbc6db3940cfc82ec337924","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.030268Z","times_seen":76,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":19,"dns":1,"connect":26,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/images/pattern.png","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.555Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/images/pattern.png HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/assets/css/hero.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"16575c0cb297dabaeaf80129ddf15496","sha1":"f4e2c65315ed5dea802c6efe54a6ae0e94c284ac","sha256":"601d1feb763109b611f0543985bb85f4cfff99b4d4eefd8f9acb278ffcf8052f","sha512":"4a73799fe2872916917d8f66d63e2ca0a2fec259a55bc24a2998ccb7998661fc04f53facc362c6b946588ded52bf7bc5a202117e911ec15f7739624c97e5276d","ssdeep":"","tlshash":"5bd0a79d9043328b441221903ac211d255481366a86582e93d41a446a50c67d848a5ad","first_seen":"2023-05-19T06:45:53Z","last_seen":"2026-07-19T16:21:21.256346Z","times_seen":69,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"worldcointrade.com/","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T01:35:53.985Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T07:58:24.171748Z","times_seen":17721098,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":50,"connect":27,"send":0,"wait":0,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"worldcointrade.com/assets/js/plugins/plugins.js","fqdn":"worldcointrade.com","domain":"worldcointrade.com","tld":"com"},"ip":{"addr":"195.34.83.112","port":80,"asn":8648,"as":"dogado GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://worldcointrade.com/","date":"2025-10-13T01:35:54.479Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/js/plugins/plugins.js HTTP/1.1\r\nHost: worldcointrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://worldcointrade.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 13 Oct 2025 01:35:54 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 36354\r\nConnection: keep-alive\r\nLast-Modified: Thu, 05 Dec 2024 13:27:32 GMT\r\nETag: \"1a67a-62885dc5409a9-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"01be0e15afa9444337973dc384f1e55e","sha1":"1ea504e9c71313780792c0f476617ede6f164334","sha256":"8bb1862ee3ae1888a4ece6735ddb5dd992d898584e4f698f1f9c7a975753d28e","sha512":"3ee759a9779f878a6f6b824fa91e06227d1a541c894421b3ca3eb7cfd88ba08a045dc574b5a0e60927eba2724e415e932b62e8c3c51bb5048b20fdcab3ce93f4","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7BpfWBZ2BJda4w9W3qG9a98x:v4J+OlfOhBppCW6G9a98Hr2+kI","tlshash":"ccb30ad9b3c6706287b734b851bf400bb177a89ab44c8960f0a5c9d47db4a4e613bf6c","first_seen":"2023-03-10T12:42:50Z","last_seen":"2026-08-04T09:32:06.028248Z","times_seen":76,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":22,"dns":1,"connect":26,"send":0,"wait":43,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-13","alert":"Phishing Block","trigger":"worldcointrade.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"worldcointrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
