web.whatsapp.com/binary-transparency-manifest-2.2232.8.json
31.13.72.52400 Bad Request 2.5 kB URL GET HTTP/2 web.whatsapp.com/binary-transparency-manifest-2.2232.8.json
IP 31.13.72.52:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerDigiCert Inc
Subject*.whatsapp.net
Fingerprint78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0
ValidityWed, 13 Sep 2023 00:00:00 GMT - Tue, 12 Dec 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2793)
Hash f1ac791356b3b6a884f9d3341fabe1da
85c8d6a72ce89e3254dea435474c3ee04d0c8cbd
87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d
GET /binary-transparency-manifest-2.2232.8.json HTTP/1.1
Host: web.whatsapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
Origin: https://ws-b4m.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 400 Bad Request
content-encoding: br
reporting-endpoints: coep_report="https://www.facebook.com/browser_reporting/?minimize=0"
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: unsafe-none
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: bFOCzJzAuUC77M4jjtJY5S5XTV7tTAsQQj93Xlaru3tkz2KGPs5Sxgwr974xHS6CSapCSPpwoSGleYm6DK5QhA==
content-length: 2460
proxy-status: http_request_error; e_clientaddr="AcI2-bsuAnmwkE0WXKyJ2cNZCq8ZMLJhw_Xq9EONUHptdACHXizFHqsaftEKY23zoyT70umYort6Rou0zo5d5raEIGB61UjVmjKbZysMdYc9Ne0W3A"; e_fb_vipport="AcID7_TiyqSPJKy5SBeGlpcDvwT-_OkmWOzM63op9KOHR_8wmmhgNJmPphRS"; e_upip="AcKl37lBrqp5kgOnnnUXmQML2vyy4hV8WCcBiYpc8as5kDdtarL7R8t73t-FOpqEyF2dfpcanzYVR2wRrS-DqLs5A7XfMRS2PQ"; e_fb_hostheader="AcJj3O5EMzZvsa4cEcsAVYgLx5CU73ryb7ZqMHjXPnWoQSRcdVte-S5jn-NrakDOWp74-tUubZCPhA"; e_fb_vipaddr="AcLLLaWtCYxDRNnxjPXdYdxnoY7ky6Oa3Ixe9IbfWPCrGZ4s9rnv-enH3drlzH58FaLBwkWAp7SSZpe-_sZ6T64V5nwXBe7lgQ"; e_fb_requesthandler="AcKSg-LgBBBbFXXF9o43zSsGHTXX2_2Uhi14UUtpmy9utRwjbAaFBmBFF1rgWvBYoHdqACDo1lM"; e_fb_builduser="AcLBaZasANag1_mQDoWAwdu7pThLivyx4DpxRYetD3O5NCV5DhHnhd480llK8XODWuc"; e_fb_binaryversion="AcL2I3EFs5Qf-xVixy16RQ42MF1mS817Vq-0D9JuHoLSoIrnEr9CX4JOFKCEyWEa18QHGPvL10O9Oe-GRIs07j2X4-Uxxx1GP3I"; e_proxy="AcJyqlVffWFzLEyRNbhhCJmaj7lcYP9HeH5kv-wRs6RylhDuvfIfPbRhkylOv3Apveg0Ki7NJYIj3pLG3iv8", http_request_error; e_clientaddr="AcIPMEsWzU3Iu28JNHNFraULuTOdxxFuix3evrFZm62WUiN5XTQj50Qq3ECwTQia5LalO_ey2koQ--4u"; e_fb_vipport="AcK4uBDRrsYr3GUwzbI_iTnRdi49zgWvynN3_2SiWmrYHuTaTWgK9joGKX7y"; e_upip="AcJ-v5lSHpvdlthqqqnv_GKhZLVvIccXSZxWmV3rOoKnJyRg1z6cEU7Korq26gukF2mBOacj876xw82t4uNaqGdf6QHpFmQkAA"; e_fb_hostheader="AcIF07kXGp7qb9uAOPAa_yXlxZ6RBgRZDWNliSIwQIrRFrcXhsc0UyYRB57f89TE5nlNJTSooPdWMQ"; e_fb_vipaddr="AcKk4gZeMB0OtK9MymuOVwIsdlO_3kRgOCIsEvTdprq3-OnFsnDSaMu0OMTAtC-PB7I2l2k"; e_fb_requesthandler="AcI6tqjUo22D9G_Oze5uwZthD7fBA5hymVv1ZEK7B72nL-0fOFqwuxAhq75tPxtdrmTMImel"; e_fb_builduser="AcJNRRCG_ZXJijqS-Xn4U-zAPgPl1uq2TZLiMyBoHibXlbRVMfcZXVhF4kLIc4OdWYo"; e_fb_binaryversion="AcIXdTyw2XxI8Ak024gKtGlaYWJPKmSiFFAEQ2I97tdjhQBMcMG5TNq_okSqHI5WX16bP03-Fvy0pk1nneTYTJVniW3rKTe8C5Y"; e_proxy="AcIBMRMhOYYGwHbBlxTTSpzhehfVBQIj4lw6AXlWH7PUOYhm46qp-oAdceKCymFyCVAUaHt4RWP8iJo"
date: Tue, 05 Dec 2023 01:36:00 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ws-b4m.pages.dev/load/video.png
172.66.44.119200 OK 16 kB URL GET HTTP/3 ws-b4m.pages.dev/load/video.png
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type PNG image data, 560 x 315, 8-bit colormap, non-interlaced\012- data
Hash 0c6ec69b054fdeb31cf3e5e10290fd8e
5b2d2ef0e3b5824addcc34d642769f5f14671411
d980ab372658f4c7c8f07d730ef6dc67e3fb3471f37928274f915c0308850994
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/video.png HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:00 GMT
content-type: image/png
content-length: 16259
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "e8d82bc87223d31f958fe3a9e246895c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EOAhkTP0Kbmt8Ifnshp%2F4QU20TP8NlLJ4tOm3D8SHxflF3IILtctwZAZ%2FAJE62W3%2F6sCuNeuTfAQDVyGffoKYBXn1%2FAR8C78GlqbCXXdbvSqdMuZpzbI3lhUIY4lpBXMot7z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e446f0b712f-OSL
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/bootstrap_main.9d6050e3d2fff5b782d3.css
172.66.44.119200 OK 48 kB URL GET HTTP/3 ws-b4m.pages.dev/load/bootstrap_main.9d6050e3d2fff5b782d3.css
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type Unicode text, UTF-8 text, with very long lines (17744)
Hash a5119c92788ad435f069432c78c09a2d
ccc1731104d01b2dea15edbe08460ef7803d624d
9cbfd4f00c4210688faaecdace3d2877e5c789a7c8d06f1d0c49507b55de6a2b
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/bootstrap_main.9d6050e3d2fff5b782d3.css HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f2144f69865583616f03de95fe1b8096"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VWZCRR%2B9186ePL2NBPB%2Be715f%2BgKysoffpeM78nnV78IINHDz8fozIoND9k8FYf1AyC5HmzZ5oV1PqYxCStCoQeK2gMy6hOnPNGfXrazK07RypLaal57%2BX5BOumyZDJAihtQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e444efc712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
web.whatsapp.com/apple-touch-icon.png
31.13.72.52400 Bad Request 2.5 kB URL GET HTTP/3 web.whatsapp.com/apple-touch-icon.png
IP 31.13.72.52:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerDigiCert Inc
Subject*.whatsapp.net
Fingerprint78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0
ValidityWed, 13 Sep 2023 00:00:00 GMT - Tue, 12 Dec 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2793)
Hash f1ac791356b3b6a884f9d3341fabe1da
85c8d6a72ce89e3254dea435474c3ee04d0c8cbd
87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d
GET /apple-touch-icon.png HTTP/1.1
Host: web.whatsapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
content-encoding: br
reporting-endpoints: coep_report="https://www.facebook.com/browser_reporting/?minimize=0"
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: unsafe-none
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: tRY5MSD/zRAcf7Y9KjPNpBrwaU5RJhvwDJBBEnTaaaa2di7chU++bFr/iHpPwamVatWxbyE/lkkFh3FvTocXkQ==
content-length: 2460
proxy-status: http_request_error; e_clientaddr="AcJ-WU2DV2iZm0R8TqdLUk_N1m3ZbMuwFvi9XQq3zvnP5xKT7LRsq49ytfan5UyFChknrIgzrXTrUf3XOm9YNZuunC3RCAlEpkjA7a1zVK6Zp7arhQ"; e_fb_vipport="AcLCvEdsnj0cQkf5XLcGm8RmAv16GXAMMnmWBQzMcWWwzFAuuPq3Mdfs2sbv"; e_upip="AcIiKCU_r-mdSy8wf9D4e68giZSCyBYZze9cjklwUnZnpQre8ctblnX70eFYJIOT82fdhKyL6G9x5g4K0a-ssB1_ktvV-ZYAegs"; e_fb_hostheader="AcIW8fN6LKi92W6_Gmsh6KETv5kBAruQcvrMjLDSXYDdOJBrE7T38sEbAWxpUJb6NHU66O-aFcVeCw"; e_fb_vipaddr="AcIryOFJPkNqq4tMAQDmkM4lNZY1atBKeSr80c-tfZE85x7zfgs9D7630U80OGSNh25G5CRCJUhyHrcvIz6qsbZA73oWTUeUFA"; e_fb_requesthandler="AcI9kcFR3kFJZHpbcNQKS3I37cXSWpk818qs-bMveDL5Wj1RugcvKtTAosQ96jwF1mlZETguqqc"; e_fb_builduser="AcLz_CUvQXVzQumjHeAYwBegDaOEr-t-wNjVIGk7t91rNeI6Rkq8fi-wgqkoG5Rr6Tk"; e_fb_binaryversion="AcLJJRFDr72n7WLwSph0mZT3NHkwqi1IJWsr-rZ0N6MvthuhA5IpaRd3cqdHYB-IyoarCtjwvMe_je9xaYhN_L3H9RUaiSvBXyY"; e_proxy="AcJR47anKYvh9dcd8hWCe9my_DojiaMwB7f0dCSbbLwj3xMPIKTzK9UZwfq1yBEo_-CYnPqjFEatLGyCrqqe", http_request_error; e_clientaddr="AcIwb_OA1JUrg1o0c1HLwALZ2JT93i9Ac52bFQX_nqHYswOqAe8q15hLKp08hBfNQzcJbPFQhblAjiuH"; e_fb_vipport="AcLyhvyv6QBdF8LWu4wW6oNNbjYr3omwHgKBRnHa9hmsZ6vEGFaBdCJGCRjS"; e_upip="AcLR0qVXVp2w5HkGFgcDFwd5CUnkfXCaFOx5C5pQsOLz0JzBwW_DSK77MeZIczZJEi_1DfNgZ51zU_iG-AipWnzKd-B2gI6MAQ"; e_fb_hostheader="AcLXpsnBZX60GSbSKNMqGby-du65G7BKAFAy9xzSucPkOVW9Kwwvqg3X6XnCxh4nZWtDkaH2HqNtAw"; e_fb_vipaddr="AcI1pJ0qZUgl61t1x3O7sHuUvvh3Ymw05mksuyjYPy9g17LB7xfHkdziPY58ucY4ae5GU9Q"; e_fb_requesthandler="AcKx2k-wcBgKRQTXNIJnOuBo4OHrsLj267ObaOPLPbw8lYSOy396pmmt--b7gT-UwA4KqVe_"; e_fb_builduser="AcLEhmsiNkyQ-lBqY_i7WgyqbxuFcIN5PxX1GpeYX-hzoQOGlBcwT2hcIgbURZv_GNk"; e_fb_binaryversion="AcJgJWLwnS3nsp-0h8u9oyrJHhGoV8jsarN9lemfeXPsb-0K1_rw7DOFnMe6tWbvo9qZLVeLQBodn3tMC0fui9s0mhCiGBQrtaQ"; e_proxy="AcIdskDyfQ5AoCBx2zw4FOp4l4PSyZ7n0-GJO4N_3Wsrw6qVgFUJg0ser8-vNgg9tuzO9J5gttODzcM"
date: Tue, 05 Dec 2023 01:36:01 GMT
alt-svc: h3=":443"; ma=86400
priority: u=6
ws-b4m.pages.dev/load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4
172.66.44.119404 Not Found 520 B URL GET HTTP/3 ws-b4m.pages.dev/load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4 HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Referer: https://ws-b4m.pages.dev/
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/html; charset=utf-8
content-length: 520
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YX92X9Xw%2FE0eI0T7N8j2dMIJkn2NTV690Z59sflZEv0LwZUBSiYv7MFODeVQkdF9H1hTHHsfOjBJRSQM2BdasF6DQzszDQSOkd0lH068%2FtWDsYNH1pal0TSVB%2Bsr1HY1g5VL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e4ae95f712f-OSL
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/ws
172.66.44.119 307 B IP 172.66.44.119:0
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 3704f92207749f1f9b308fc856e7b7eb
b12e7554f139b239e0cb11f2138fa328e414a761
7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /ws HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://ws-b4m.pages.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: as6OcgRLvHIqbxPL8Mmr/w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 404 Not Found
Date: Tue, 05 Dec 2023 01:36:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I8I7AbkvdmAmyd75%2FK2ANVEpsBA3x0IRgewGfggEgTfItMlhQitZxJkGfdXSRn2LbfqHgQ%2BeP95Rl6qx%2F%2F65RyW40m3GON6UfffRL25AWAe384ZIVgTZi%2F34cNap2GBLJ1gK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 83088e4b68b556a9-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/qrcode.min.js
172.66.44.119200 OK 20 kB URL GET HTTP/3 ws-b4m.pages.dev/load/qrcode.min.js
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (19927), with no line terminators
Hash 517b55d3688ce9ef1085a3d9632bcb97
2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b
c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/qrcode.min.js HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:00 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"7ada293847f072170f0c5a32bd67bad3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TYeLtDVZ1og3Ak5B8qx%2BETShsyJI7xXbbaQnwHPdj4rAbH02yJNcht8Q%2B%2FBk%2B6Lo8LBlkHgnnfv%2BDaPuMBqj6blg9irwNW%2F64APNWHfmyTEL9X2ZqwF9x2gTdN4KaE8Qi1V4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e446f0a712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
web.whatsapp.com/img/favicon_c5088e888c97ad440a61d247596f88e5.png
31.13.72.52400 Bad Request 0 B URL GET HTTP/3 web.whatsapp.com/img/favicon_c5088e888c97ad440a61d247596f88e5.png
IP 31.13.72.52:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerDigiCert Inc
Subject*.whatsapp.net
Fingerprint78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0
ValidityWed, 13 Sep 2023 00:00:00 GMT - Tue, 12 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/favicon_c5088e888c97ad440a61d247596f88e5.png HTTP/1.1
Host: web.whatsapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
content-encoding: br
reporting-endpoints: coep_report="https://www.facebook.com/browser_reporting/?minimize=0"
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: unsafe-none
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-type: text/html; charset="utf-8"
x-fb-debug: CtXFeX5KTCtKCQvCl295IeQKD9ML3i+UZX/n0YLG3ElLNSh0ihhVLPvw6HipahV9+tuCMBUqsNDOPlwPTcRg2Q==
content-length: 2460
proxy-status: http_request_error; e_clientaddr="AcI6mrd4GNRwlg5vaMn_vK-w5ZcpscAFGiz_XU2RpqG4jRKUZdGWgJOs2STwNhDm28oMNb_SgYHMyHK0JJ2Z8K2Bkl3t77KYabwltlgJx-bl9Vy8QQ"; e_fb_vipport="AcLWgkNPDG-UXaHIpIgr0nu6qdiEGmonNjxrfb3CukQEHmiIgDydZaCxNwfk"; e_upip="AcLjdAtgUiGowB4qPLMycPmkcW7PG0bcBcVUAxnhpkqipa8vQLDSkTi_y1cdS5bpIYeanWQiv_LJABzh0u_5W8KveWtj-y7ktB4"; e_fb_hostheader="AcKsgeffY-nJOYW_aTQtAXK5Ae_7uluucDYKW_-ZMu_-MUCMEvxwmnX6fiaXJchVkpZ8ZHxdFKo3ew"; e_fb_vipaddr="AcLzpV7SL6WaxB7sHOnUpRqgNKEolK6YPpti9_Zmt6zyguz2nj_jiup6naQ5AuSw53wUVyTM0sjXBxyLvaR9TFvg9VTXYZ9mUg"; e_fb_requesthandler="AcIh0o1XpJ5IxiBMy_3N_dfw_8RqBP4kifmuAJXjztf8clBrFlTydY-X1CUJ4ClkwNCiPsh4Icw"; e_fb_builduser="AcIQRUZDa9LHC53w9itRZzh29aeqzChsrmwZxi6RXmZqG-06mtVPXFEKDRI6VrRPQOU"; e_fb_binaryversion="AcLfPQYK2CBgT4hGeU2S07z8oU_3hlWGOMn4MX8hEkmQidrV2ciVtzD84YCQeU8iwjZzQzKLtUUeBEw9lNyuhoiP724caQsePTQ"; e_proxy="AcLrXCSQx1GKCWf3AEb4zvj92ePgFvB9yhdkkNlNUnXHW_z77RhBQeNJHndqEIXrH6VXOfwLoOX9pGEYS4Y_", http_request_error; e_clientaddr="AcKWfG9xygiDI1A-ewcHT4liEAm_tfem8KAQjcKjI-Hmb98IlHtAOuZr5ceLExqEL8xXBliuwhjCbnW8"; e_fb_vipport="AcKPBaLWPrvcfe5ZEdST0blZOrJ_qIEP1qz7Q5YUmVghsvCtHfOxYZpPtiln"; e_upip="AcKk2jEXfj0plQCDIwchs1-_YF1BHR5Ja9CirF7xZrHrrhfyjbZlfRTlOnih51ftH9VvzvdL0GPr6Bq0ZTlAJObgdKKYRz6QKw"; e_fb_hostheader="AcKYn6x-SHXSJXR99QNOwLePmanlpnUozUs54yskE-dWSD1pGKxObE0niuyoTOTphj3gVvnsvyyFpg"; e_fb_vipaddr="AcJF4-A4amRthFro0CpPfntZGiUETaR7XrKxWyRM8ZBt3ReYYfk-ssReW78cOxjQU57RZ1I"; e_fb_requesthandler="AcJ-AdS8gxvWhNQWvc56_qXJV5nv-CylIpEG45-op5PF70-DdVfR7t_UYZoXTV4ZYXuTd878"; e_fb_builduser="AcLKrSiAajB-Ykt-Q_09o5FNkz0HOnBzgwcIx8TVzoptxvdvzG5mO4STiFYeJ155_RU"; e_fb_binaryversion="AcJjA6z3gCZy9i9UytS5Qc6utWjObOu9DRcf0PVNEy-_kZtLA85bgb-brnxvtK8mGKclZF41Q2nhecz3uK8AgKoDcMp4wPX1Mzo"; e_proxy="AcL3KdrPZxWile0MthlyX_bL8fXN14gNXj0GCUV9nxa8ljI0iVbDo9DqAz2_6jGh6k3u4er9w0DHd-w"
date: Tue, 05 Dec 2023 01:36:01 GMT
alt-svc: h3=":443"; ma=86400
priority: u=6
ws-b4m.pages.dev/load/bootstrap_qr-e2b403f65ed52d327e90.css
172.66.44.119200 OK 177 kB URL GET HTTP/3 ws-b4m.pages.dev/load/bootstrap_qr-e2b403f65ed52d327e90.css
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
Size 177 kB (176830 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/bootstrap_qr-e2b403f65ed52d327e90.css HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"03e94140affd61cffcdc0cc2d7d64da0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ilUjxZZyhIH4UAGLKxURnezdinBSMkO%2B6kbciFc%2B%2B%2BzqxtMjFd9P5HqVMkoDUFSdraF0OGk2iw64e6ds28TR0YtB8k5fMKa2R13DO%2Bo7HKlpcQNkrlK50PzZXrBzDzqRH3bc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e444efb712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js
172.66.44.119200 OK 250 kB URL GET HTTP/3 ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 250 kB (249969 bytes)
Hash 8ab914b33a56ffa80ca1de0819a70684
0a103d668f19bd5529de831446389eabd85f3550
b32cb4726155800367b1e44af2fd940b77aed84cc9baa11c0381bf35dd993c98
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/libsignal-protocol-ee5b8ba.min.js HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8a9ebdc63ef791fcc4d7fc80f12ae130"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oqgQZ20ot7c0xWWiQuwP98eIQMqBjvZs3pzmIxHfGjVQqefhgBbROWycoxv4dKm5ebklu0Xt9TImQcGzq%2FzN8juonHER4PJ9R1NqHidVxGlxAAwM6otg%2FFChCpvHxbnDyMHf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e446f0c712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/ws
172.66.44.119404 Not Found 0 B IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /ws HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://ws-b4m.pages.dev
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: as6OcgRLvHIqbxPL8Mmr/w==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 404 Not Found
Date: Tue, 05 Dec 2023 01:36:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I8I7AbkvdmAmyd75%2FK2ANVEpsBA3x0IRgewGfggEgTfItMlhQitZxJkGfdXSRn2LbfqHgQ%2BeP95Rl6qx%2F%2F65RyW40m3GON6UfffRL25AWAe384ZIVgTZi%2F34cNap2GBLJ1gK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 83088e4b68b556a9-OSL
Content-Encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/stylex-2d46744708947781f1f33a0069cbc308.css
172.66.44.119200 OK 116 kB URL GET HTTP/3 ws-b4m.pages.dev/load/stylex-2d46744708947781f1f33a0069cbc308.css
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (937)
Size 116 kB (116339 bytes)
Hash ce08c431738ca6a8561b1c58a35b0b70
46628f24522fd5f7891a61a3668cde2aaaa80dd6
d3889a9a244c69018e4848bffa27b76845ca2c34813976342d4b122e6533bbca
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/stylex-2d46744708947781f1f33a0069cbc308.css HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"65cf534a072c0cdda7d1094f883a9072"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c%2BvqgZsiAoxao3rgwPg4H4rA5Y3V62FfQwrgbc6RMJ4VQpQVzo%2BmEl2jAYe7mx359DXez2qAguQICQM%2BzwgfGGf6uWt17qkBFrHuiER4xLwCTyB%2FQJeMZB3WlCPZvmblW04A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e444ef9712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/jquery.cookie.js
172.66.44.119200 OK 3.1 kB URL GET HTTP/3 ws-b4m.pages.dev/load/jquery.cookie.js
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (3439), with no line terminators
Hash c776f7843da058a9030aea314d49613f
b91ca11b466e153f05219e5e1a1e9f4348b2cc14
573c67cf9289d24e8756d0f86d37652e7f2383233ad50dca47f2ae5382923735
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/jquery.cookie.js HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:00 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ccdb2dc189ac698dd8a582a4291c7451"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FvcsT79o7r2Kx7FlwSc9UNVo3ppY%2FvsccdI35ujELdARA5o0Oci3H9ZLiZVTPVoapjyufnxJeQhBEXxOI1npN9TrwKII3ouhM%2FKEyqPO930P8sv6wXvl47lkjv%2FYWdAyDLch"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e444f01712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js
172.66.44.119200 OK 16 kB URL GET HTTP/3 ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (15564)
Hash 46e475d8d5495b3ad954747f1898efe9
c1672a101e0216f9cc585bc4ee4c0340a6cd8c77
cd00a8ee12254d2285a82ea490590610a500c867831301e8d91884f93ca3c564
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/runtime.88c356058afe3d58a508.js HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:00 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"7430056c140c5b0c8d938cac5e9dfa97"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DetSzMeIrJFol%2FIxHdu7tP5sIazmuYIO34VweMKN2r3dBxcAP6WAlo3DFyUX669lKoPneNFbe7o9Rjs0eSvFFDIR2DNliBfHL4weK2ub5j9nJI%2FizkcM6HiKA8hJ%2BGrCCm%2Fs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e446f0d712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.66.44.119200 OK 31 kB URL User Request GET HTTP/2 IP 172.66.44.119:443
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 01:36:00 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"554720f792b79cc8a07994696559ec5d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WJ0VsfJSxfZqcA30AnK3qd4AQVnHLEY5Hh98eIVMc1nuaBUxJTWVAl1p7r4BJj4WbWACaJMQ%2F1ty3gLD5%2BKIMOI2ZUZAawwx4gTWUMY%2B%2FHOONxJ5rSB4omHqdgdCo02FS3%2FD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e402c6056c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ws-b4m.pages.dev/load/jquery.min.js
172.66.44.119200 OK 93 kB URL GET HTTP/3 ws-b4m.pages.dev/load/jquery.min.js
IP 172.66.44.119:443
Requested by https://ws-b4m.pages.dev/
Certificate IssuerGoogle Trust Services LLC
Subjectws-b4m.pages.dev
FingerprintF0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE
ValidityThu, 19 Oct 2023 02:17:35 GMT - Wed, 17 Jan 2024 02:17:34 GMT
File type ASCII text, with very long lines (32072)
Hash e3f24f23b859cf718282e3806ed5ce38
c92a61cb4fbc23adb05973638f60e2999bed4a26
e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240
Analyzer Verdict Alert OpenPhish phishing WhatsApp
PhishTank phishing WhatsApp
Quad9 DNS malicious Sinkholed
GET /load/jquery.min.js HTTP/1.1
Host: ws-b4m.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ws-b4m.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 01:36:01 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"0b037baf132504ce7005a11383470752"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GKYGYBguH53dVnh6QEoawdHbuGdq1yp390y5rbU8EuXLKH%2BEK7ze%2FxwKsI%2FhAOqz2oxyJGwyEGhIL5MSZuighTgWKqC%2BRboj6FEkxt8Uabv%2BJYFHST1fI6gJczRflEaQOgyV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83088e444efe712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400