{"report_id":"0ecfc278-1a44-4654-a88d-fc74a82f089c","version":6,"status":"done","tags":[],"date":"2026-03-18T10:47:54Z","url":{"schema":"http","addr":"wacheck.services","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wacheck.services/check.php?lang=en","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"title":"WhatsApp Safety Check Center","dom":{"size":20157,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (484)","md5":"db5938660a9c870a58ace0c15a84a763","sha1":"cfc6ce6b40607a839df7c7b8ae16741d9809b5e7","sha256":"cb53c39b9e48ebaa8080b311deacab7f08432eaa251ee18f591ce262d0e7295c","sha512":"a44280c3eaf3ef52b8be01698d482b11fbfad0838eac928bed4d62336efe0d63f808cbb8d9b87162fc6232ec9df4ad4eafd3c29e58e57f50445d83c973574baf","ssdeep":"192:BrAC8FyAGKlSEBvQezoEByCJB490R/dDvzHWyWQxr8nxTrjyf+kJB9M+Zp4bzQTt:BrAblzt/e90Lvz2yWQKn9yjJXUXHjxq","tlshash":"1f92739b66b71429b45320ac7beb66067235d003d209ec187f5d63a88f879e4ec7379c","dom_hash":"domhash89a00bc1226d913c857f19bdef55e79f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wacheck.services","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T10:47:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wacheck.services","ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-18T10:47:54.629695Z","last_seen":"2026-03-18T10:47:54.629695Z","alert_count":25,"request_count":5,"received_data":26772,"sent_data":2345,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wacheck.services/","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d373d51f6c31c18934cafeae2884fcf1","sha1":"6ccd8d6f0e048fa0438873d3f7f4ae01712c7eef","sha256":"1754354c530d4b3d71473515e114144232bd2f338944559d86e60a069c50d25a","sha512":"7958cfc7eb6a1ba9863305c4ff759dd2e6eebfe7f7ce7f82c4a78283801165e5451494fe0b12aa27fbe78b64128994bf87f486ab77e6007d57a5dc0b1f6d0ff2","ssdeep":"","tlshash":"dab0129a146200443263d031052b1400103720ab010cc900be0dc1500f3431f22d36cc","size":88,"data":"","first_seen":"2026-03-14T12:47:01.691664Z","last_seen":"2026-03-18T12:16:31.931079Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/check.php","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e90385293bf9493b2defc497011a4b9","sha1":"69133c33d389a4d144fb31339d812590c7612412","sha256":"d019d5852fdf82fdbca384e62cf478ce5b8b1b4d3c1dd0d6d5c074b61ab8e52a","sha512":"1e3d411b076eeddc1002ed083afda0aa138e5590a8be22f33597cfffcec151a97a77c1d3cdbf388339d9bc2984dadfc95f38fa5cbe3cc2cce8d99acca616ee9f","ssdeep":"96:A3kJnB9WJIdZp4b4iQTsku/qUFoWyzyoZ/Y1qkj5VpGVOx:qkJB9M+Zp4bzQTskuiUFoWyjW1qkjrpz","tlshash":"9aa1dbae78b7603290a7306e77eba608752410433405fc497f1e8b045fc7e65e9f6aac","size":5040,"data":"","first_seen":"2026-03-14T12:47:01.689848Z","last_seen":"2026-03-18T12:16:31.933219Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/lang/en.js?t=1773830855348","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93dee57f4cba9a782263777de4da6c60","sha1":"1e1cc2428fba5e35f956b7cb1c63fd5753545aa7","sha256":"a5fac817e82049afb057775ad603b2a59abed6044b3c6e298d102fd208a8edaa","sha512":"af2bd4242856272554c5a136535d166b03db7eb12e1241ff44d62b1cabf4504ef741b65a4e0c0b9573f9f96ba4b6a9f74f4f72a82fe8f27ef650dec260a3641f","ssdeep":"","tlshash":"2831448b435a21264e4344503e8e1a66f33430acdf76a87af9ed005c37dd66995ff5c1","size":1645,"data":"","first_seen":"2026-03-14T12:47:01.686429Z","last_seen":"2026-03-18T12:16:31.923502Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wacheck.services/","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:47:32.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wacheck.services","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 07:02:01 GMT","end":"Sun, 14 Jun 2026 07:02:00 GMT"},"fingerprint":{"sha1":"6B:05:03:21:84:AE:7A:9A:E8:1D:C2:E6:B8:A2:0A:23:37:88:EB:70","sha256":"80:29:B8:2C:EF:9F:C5:B8:71:B8:AC:16:FD:32:6F:DE:22:1B:12:9D:FC:F0:D9:44:71:5D:C7:0F:60:4E:06:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wacheck.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1364\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 18 Mar 2026 10:47:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3505,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (390)","md5":"382db32ef3a66927a13b091f74cf679c","sha1":"9d070f7a9e71f07cd42d08413f4ffa8a1e79c102","sha256":"7f871c746ff9b15e9b79c5e2559074f0e71a223d621f3bf79b5e8b553033da2e","sha512":"b7e16668ba59dc01c26970c927bce90f5b0b241a6821f3f32ab65440c92feb81d38ecb2b154a4d5b697aebd2966d9311c9f04acc2ac8acd1aa739337ede74455","ssdeep":"","tlshash":"3571cb5a42f30118b51395701ffa16242669c58b824ec9183fdc32a8ef996ce9df37d9","first_seen":"2026-03-14T12:47:01.680467Z","last_seen":"2026-03-18T12:16:31.926895Z","times_seen":6,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":380,"dns":48,"connect":162,"send":0,"wait":168,"receive":1,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/favicon.ico","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wacheck.services/","date":"2026-03-18T10:47:33.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wacheck.services","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 07:02:01 GMT","end":"Sun, 14 Jun 2026 07:02:00 GMT"},"fingerprint":{"sha1":"6B:05:03:21:84:AE:7A:9A:E8:1D:C2:E6:B8:A2:0A:23:37:88:EB:70","sha256":"80:29:B8:2C:EF:9F:C5:B8:71:B8:AC:16:FD:32:6F:DE:22:1B:12:9D:FC:F0:D9:44:71:5D:C7:0F:60:4E:06:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wacheck.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wacheck.services/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 263\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 18 Mar 2026 10:47:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"26e226a0207cb25bc2e7323a18835e86","sha1":"c7d1898a7c4c631e22ba8c71202c445a8b7c57ae","sha256":"2c11c9cbf3d1b3af3e44f61b9bc7058ab9189f69660c620931d45a91167e2a9e","sha512":"690315430771133bb9515a7c86cc53a3b1d0f0d174b079071d704e9e9da95a6bf97ee66c31cd9bf74e657e92680672a1bdd8fc6581d07c62715cabada7367f65","ssdeep":"","tlshash":"0cd02b9d908323970811145039c211c2228c12e6647991a83dc5d44b525853dcccf1dd","first_seen":"2026-03-18T10:47:58.195872Z","last_seen":"2026-03-18T12:16:31.924932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/check.php","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T10:47:35.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wacheck.services","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 07:02:01 GMT","end":"Sun, 14 Jun 2026 07:02:00 GMT"},"fingerprint":{"sha1":"6B:05:03:21:84:AE:7A:9A:E8:1D:C2:E6:B8:A2:0A:23:37:88:EB:70","sha256":"80:29:B8:2C:EF:9F:C5:B8:71:B8:AC:16:FD:32:6F:DE:22:1B:12:9D:FC:F0:D9:44:71:5D:C7:0F:60:4E:06:7F"}}},"request":{"raw":"GET /check.php HTTP/1.1\r\nHost: wacheck.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wacheck.services/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5361\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Wed, 18 Mar 2026 10:47:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20083,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6ff7456c5b395abf5a7cf1206f780714","sha1":"391b032d0c132c5a5af5df3ab91f3c5755bcc200","sha256":"caa63051f216486d7a36ae3ac25b5d84fddfba495ab8b914e78a80f3e9be5670","sha512":"b35142d5aa129d178d5d2d1cd602798811668fe089ad93d11d97f5839618feb5b86376dd8164c020faff7185cf3ca2e6757f95f189a0bb5ee622aed5667756cf","ssdeep":"192:dAC8FyAGKlSEBvQezoEByCJB490R/daAQHd9SeQxynGvTrjyf+kJB9M+Zp4bzQTb:dAblzt/e90iAQLSeQongyjJXUXHjxY","tlshash":"7192729b66b71029b45320bc7beb660672359003d209ec187f5d67a88f879a4ec737dc","first_seen":"2026-03-14T12:47:01.684572Z","last_seen":"2026-03-18T12:16:31.928925Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/lang/en.js?t=1773830855348","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wacheck.services/check.php","date":"2026-03-18T10:47:35.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wacheck.services","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 07:02:01 GMT","end":"Sun, 14 Jun 2026 07:02:00 GMT"},"fingerprint":{"sha1":"6B:05:03:21:84:AE:7A:9A:E8:1D:C2:E6:B8:A2:0A:23:37:88:EB:70","sha256":"80:29:B8:2C:EF:9F:C5:B8:71:B8:AC:16:FD:32:6F:DE:22:1B:12:9D:FC:F0:D9:44:71:5D:C7:0F:60:4E:06:7F"}}},"request":{"raw":"GET /lang/en.js?t=1773830855348 HTTP/1.1\r\nHost: wacheck.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wacheck.services/check.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 11 Mar 2026 03:53:28 GMT\r\netag: \"66d-64cb7941e3e00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 798\r\ncontent-type: text/javascript\r\ndate: Wed, 18 Mar 2026 10:47:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1645,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (454)","md5":"93dee57f4cba9a782263777de4da6c60","sha1":"1e1cc2428fba5e35f956b7cb1c63fd5753545aa7","sha256":"a5fac817e82049afb057775ad603b2a59abed6044b3c6e298d102fd208a8edaa","sha512":"af2bd4242856272554c5a136535d166b03db7eb12e1241ff44d62b1cabf4504ef741b65a4e0c0b9573f9f96ba4b6a9f74f4f72a82fe8f27ef650dec260a3641f","ssdeep":"","tlshash":"2831448b435a21264e4344503e8e1a66f33430acdf76a87af9ed005c37dd66995ff5c1","first_seen":"2026-03-14T12:47:01.686429Z","last_seen":"2026-03-18T12:16:31.923502Z","times_seen":6,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wacheck.services/favicon.ico","fqdn":"wacheck.services","domain":"wacheck.services","tld":"services"},"ip":{"addr":"139.84.223.190","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wacheck.services/check.php","date":"2026-03-18T10:47:35.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wacheck.services","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 07:02:01 GMT","end":"Sun, 14 Jun 2026 07:02:00 GMT"},"fingerprint":{"sha1":"6B:05:03:21:84:AE:7A:9A:E8:1D:C2:E6:B8:A2:0A:23:37:88:EB:70","sha256":"80:29:B8:2C:EF:9F:C5:B8:71:B8:AC:16:FD:32:6F:DE:22:1B:12:9D:FC:F0:D9:44:71:5D:C7:0F:60:4E:06:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wacheck.services\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wacheck.services/check.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 263\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 18 Mar 2026 10:47:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":263,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"26e226a0207cb25bc2e7323a18835e86","sha1":"c7d1898a7c4c631e22ba8c71202c445a8b7c57ae","sha256":"2c11c9cbf3d1b3af3e44f61b9bc7058ab9189f69660c620931d45a91167e2a9e","sha512":"690315430771133bb9515a7c86cc53a3b1d0f0d174b079071d704e9e9da95a6bf97ee66c31cd9bf74e657e92680672a1bdd8fc6581d07c62715cabada7367f65","ssdeep":"","tlshash":"0cd02b9d908323970811145039c211c2228c12e6647991a83dc5d44b525853dcccf1dd","first_seen":"2026-03-18T10:47:58.195872Z","last_seen":"2026-03-18T12:16:31.924932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"wacheck.services","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"wacheck.services","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}