{"report_id":"13e4add4-b490-40f2-b724-9101efa93aac","version":0,"status":"done","tags":[],"date":"2026-07-23T00:48:18Z","url":{"schema":"http","addr":"whatsapp.xolura.com/app/whatsapp","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/index","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"title":"Whatsapp","dom":{"size":12487,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8585)","md5":"e49c9006f8c81970ceca58b18a7cb33a","sha1":"2c25981fc7a6cfb0264056645f1c451aa9b4a298","sha256":"dca8e285d947d206ea6fb05052be03c2a1da57e42da304026cae3bc0029035b1","sha512":"084188e8e2ad766068dd428808caefb979c51fd25915aaa8e9110c542035adacad4223e58017a62e81e3a09358357b928d54b206c86f50f0be82f976feeb7f4b","ssdeep":"192:BvxBHYsie/5L1I1PrPgfIVjpFyk7VyzLyRh2SQbq9Ej4qabWzdj:BvxBHYsiPrPg2jbx6lSQbq9Ej4/WzN","tlshash":"4e42bdf8524832ef4ab7be9de813fe06b1abc128d52b456832ed55684ac5fb1c1d1334","dom_hash":"domhash68488dbd60efe269bb8d108410141dfd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whatsapp.xolura.com/app/whatsapp","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T00:48:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.9.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":4,"received_data":197376,"sent_data":2312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"whatsapp.xolura.com","ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"domain_registered":"2016-06-21","domain_rank":0,"first_seen":"2026-07-23T00:48:19.732182Z","last_seen":"2026-07-23T00:48:19.732182Z","alert_count":40,"request_count":10,"received_data":1180696,"sent_data":5059,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.9.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":13470,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/runtime.b09f40cfa39d308d.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d32585cafbc71dec14f793479c3b0c1d","sha1":"7378059d619cd289de3e965836b04cd66ca7d0d6","sha256":"12da5fab45b8274a80efd41b92e88d721310068c0fe13b508e58a72b4766a596","sha512":"f0b988b92a598641da15c0ca601758192c2ef98045f7580ca8879378199e64f2b28b9b43f079f2a2a843240dc9432b5099a0bf92f5f12840934566f562020fe6","ssdeep":"","tlshash":"2471d9b12674fdb63af544c0243e8895b229b03a441be8f1ab1bcda9a564dc10921ff1","size":3574,"data":"","first_seen":"2026-07-23T00:48:24.28751Z","last_seen":"2026-07-23T00:48:24.28751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/polyfills.ac95b62f817a9028.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5b7d854960086c3f8db6d6cc8b842f4","sha1":"908b168d2eaad352097617b691426341a202b33f","sha256":"e883f35a75a7d358cb43737a6e20ce14029da92e9a7457e6bb4dde7029ddb1fd","sha512":"c72259c28dbe146644edb01065ec88ea9b3c02d6703ab5f344c2c5024b1c6551ba9f9d09fc5ea635bcc5db15849e9735b67427ea39e2f52673e69bf7619f3043","ssdeep":"768:0T1F24GL3V61SKhh21ll01sCmArvXV+SIM1Iih+GororzOIUresogpJSbZOfXImi:U+vU6E6tSTQQ","tlshash":"2ee21ad973d1b4b687fa59f1c03b4007f63669a07c4c88d8f15c88ea397b049a5a6f2d","size":33867,"data":"","first_seen":"2026-07-23T00:48:24.281402Z","last_seen":"2026-07-23T00:48:24.281402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/scripts.ed1ea1e0d2e942ca.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e9c09d75151a75e719d1a1c678c2fe","sha1":"1019d0f60bc8c077e3ca1b1987682dc0ae8c0d11","sha256":"9923f8f7622d096710bfa8b0476153e559643525f56bcfeb4cc846c4f1bf88c0","sha512":"9e7a8602a90612853af955a9f6539314952e71a5b42488d439048505c0e3402438553671d8424488f7da41aee826edf97b1e2ea8d352073255a12ad4572dcfdc","ssdeep":"3072:9Du6aG6BYtLSfLdBgkH7Sxx25JWkyUM9iE0N9eXh0UX17sLPGP:ZaCtLSfLDgcSb2bWkyUEIqLX17WPGP","tlshash":"be24288a3295b432469f6479807f050fb6322e9d944aa018b65de8dc3dbcd88613ff7d","size":221269,"data":"","first_seen":"2026-07-23T00:48:24.293634Z","last_seen":"2026-07-23T00:48:24.293634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/main.2da4fb935e08551b.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cbbb2426562efaf3ae7839046dac559","sha1":"5939a219e1406840f6c60232ffe3161df98d19bb","sha256":"563335e313ebef89c6ef739c714ed32af07e5f0092827d1834cccfb404d306f4","sha512":"556062203927ce8460384ffbc351a82f2e3292ccc586e6950e0b747b8f3917b94ee55758e15e29cb0ba7c690df1ee3d9166423d1dc6ca1dca4111c4efbb8b221","ssdeep":"6144:ola4YXDoTtyNkQk/2MzNc1ISbRtGjhhbaNbba9UzJziPpDDNO+2WGp:qZYkTtofMeIFCba9UzxITt8p","tlshash":"7dc4e6d93293b06293e604e5507b0447f23d6c8974488468f2a8dcee3d7995da2bbf7c","size":559335,"data":"","first_seen":"2026-07-23T00:48:24.283331Z","last_seen":"2026-07-23T00:48:24.283331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/index","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-23T03:28:20.026476Z","times_seen":340068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.9.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:51.162Z","timestamp":1784767671162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:19 GMT","end":"Mon, 21 Sep 2026 08:39:18 GMT"},"fingerprint":{"sha1":"56:2E:0F:D1:D0:27:1F:92:D4:39:8A:28:B9:FE:ED:D0:51:56:59:00","sha256":"50:B0:8B:72:1E:CD:1B:CF:FF:05:C2:98:8B:5F:C4:33:B3:2E:A1:FB:F1:12:28:6E:32:E5:DC:72:3C:39:7F:94"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapp.xolura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:39:16 GMT\r\nexpires: Wed, 21 Jul 2027 21:39:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97715\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T03:29:03.934383Z","times_seen":243295,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/polyfills.ac95b62f817a9028.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.015Z","timestamp":1784767669015,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/polyfills.ac95b62f817a9028.js HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33867\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-844b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":33867,"size_decoded":34130,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33867), with no line terminators","md5":"a5b7d854960086c3f8db6d6cc8b842f4","sha1":"908b168d2eaad352097617b691426341a202b33f","sha256":"e883f35a75a7d358cb43737a6e20ce14029da92e9a7457e6bb4dde7029ddb1fd","sha512":"c72259c28dbe146644edb01065ec88ea9b3c02d6703ab5f344c2c5024b1c6551ba9f9d09fc5ea635bcc5db15849e9735b67427ea39e2f52673e69bf7619f3043","ssdeep":"768:0T1F24GL3V61SKhh21ll01sCmArvXV+SIM1Iih+GororzOIUresogpJSbZOfXImi:U+vU6E6tSTQQ","tlshash":"2ee21ad973d1b4b687fa59f1c03b4007f63669a07c4c88d8f15c88ea397b049a5a6f2d","first_seen":"2026-07-23T00:48:24.281402Z","last_seen":"2026-07-23T00:48:24.281402Z","times_seen":1,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/main.2da4fb935e08551b.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.254Z","timestamp":1784767669254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/main.2da4fb935e08551b.js HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 559335\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-888e7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":559335,"size_decoded":559600,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4cbbb2426562efaf3ae7839046dac559","sha1":"5939a219e1406840f6c60232ffe3161df98d19bb","sha256":"563335e313ebef89c6ef739c714ed32af07e5f0092827d1834cccfb404d306f4","sha512":"556062203927ce8460384ffbc351a82f2e3292ccc586e6950e0b747b8f3917b94ee55758e15e29cb0ba7c690df1ee3d9166423d1dc6ca1dca4111c4efbb8b221","ssdeep":"6144:ola4YXDoTtyNkQk/2MzNc1ISbRtGjhhbaNbba9UzJziPpDDNO+2WGp:qZYkTtofMeIFCba9UzxITt8p","tlshash":"7dc4e6d93293b06293e604e5507b0447f23d6c8974488468f2a8dcee3d7995da2bbf7c","first_seen":"2026-07-23T00:48:24.283331Z","last_seen":"2026-07-23T00:48:24.283331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1548,"timings":{"blocked":-1,"dns":0,"connect":260,"send":0,"wait":506,"receive":1030,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/fa-solid-900.60c98577a5b2ddee.woff2","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:51.156Z","timestamp":1784767671156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/fa-solid-900.60c98577a5b2ddee.woff2 HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/styles.9730364aec558e09.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:51 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 114740\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-1c034\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":114740,"size_decoded":115007,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 114740, version 898.256","md5":"0a74987bb59fa4a5a8e2eea68608d6f9","sha1":"79f2a488fd9c1e1f01943a196f5abf53821e04d7","sha256":"ff58a6b0a01dbce082458f6e5a58719df4e80e0c2b50f744bb5871e21eca6878","sha512":"ec8014a9438540096e4bdece6ced4d48e848516b23a2c518c34c691cb607761c92441e7ae73f5fa6a6085030a0e84d5ad809cbb1cf709b4ec94982bcdc2e1f38","ssdeep":"1536:vVz7d5z5vXXHkt13bkksuapy48cgRDEixUsH+bu9w7D/FzbmQOr+rqZa4ZHKCL8u:Nv1vXHggQDTGsxqDdmQXrEa4ZHKCLWsX","tlshash":"b6b31226718ea701c81e47c7f2ed96cfd3a6420b1897198f345e3d0237aa81a933d9d7","first_seen":"2026-02-11T07:20:24.326567Z","last_seen":"2026-07-23T01:51:04.157Z","times_seen":940,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T00:47:48.495Z","timestamp":1784767668495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/ HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:48 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a59f1d2-f65\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3941,"size_decoded":1968,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2987)","md5":"09ae31737081d797b60fdf4c7a90d326","sha1":"7292208710434a680991a5572f3c4006ab4b6e31","sha256":"54b03958be4c19a19bb2aa5b1bf87329ad9929d5d6a50b6c020aff916885cd16","sha512":"289665a37dd106b7fdf49e68dc4887dd59978235eca3ec4421f52f16086368d922f2ff58e351f42c9f61cb4e5f3743d2387904306d3a55224dacfa7e59006e7d","ssdeep":"","tlshash":"5881d94aa504d02be11ec96b7895f5064e078424c5459bac74ab7239feceefe90f3370","first_seen":"2026-07-23T00:48:24.285921Z","last_seen":"2026-07-23T00:48:24.285921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/runtime.b09f40cfa39d308d.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.013Z","timestamp":1784767669013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/runtime.b09f40cfa39d308d.js HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3574\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-df6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3574,"size_decoded":3835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3574), with no line terminators","md5":"d32585cafbc71dec14f793479c3b0c1d","sha1":"7378059d619cd289de3e965836b04cd66ca7d0d6","sha256":"12da5fab45b8274a80efd41b92e88d721310068c0fe13b508e58a72b4766a596","sha512":"f0b988b92a598641da15c0ca601758192c2ef98045f7580ca8879378199e64f2b28b9b43f079f2a2a843240dc9432b5099a0bf92f5f12840934566f562020fe6","ssdeep":"","tlshash":"2471d9b12674fdb63af544c0243e8895b229b03a441be8f1ab1bcda9a564dc10921ff1","first_seen":"2026-07-23T00:48:24.28751Z","last_seen":"2026-07-23T00:48:24.28751Z","times_seen":1,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/styles.9730364aec558e09.css","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.386Z","timestamp":1784767669386,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/styles.9730364aec558e09.css HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:49 GMT\r\nContent-Type: text/css\r\nContent-Length: 225077\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-36f35\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225077,"size_decoded":225328,"mime_type":"text/css","magic":"ASCII text, with very long lines (48635)","md5":"bd649efce440d952fd9c26466205651f","sha1":"faa91afd355260cf848a2a90da26bdf1f97d0ee6","sha256":"837ba138085011921ea781001a37bb0a7b8be153d4ad859377942c66ff98312f","sha512":"878e293171a608a3100ce552b00deaf92f858ef1c20a39daad828b065d3824ad316584fb3c6602f7c0d092af0835f0e418fbe74217ef29657acb98cec0d622ab","ssdeep":"1536:ZDqhIaBbM2vKuorU6Lp1eQa2j/F/w5LET+a3SYiHENM6HN26JMnMOMgMwMtMFMzT:tqvl5Y6a3SYiHENM6HN267KrE4juJkm","tlshash":"c524b596f850202bb063ca3f7490bfb9157bd340d7520aaaf0372f645ed55ce256bb28","first_seen":"2026-07-23T00:48:24.288979Z","last_seen":"2026-07-23T00:48:24.288979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1707,"timings":{"blocked":392,"dns":0,"connect":0,"send":0,"wait":535,"receive":780,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.9.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.395Z","timestamp":1784767669395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:19 GMT","end":"Mon, 21 Sep 2026 08:39:18 GMT"},"fingerprint":{"sha1":"56:2E:0F:D1:D0:27:1F:92:D4:39:8A:28:B9:FE:ED:D0:51:56:59:00","sha256":"50:B0:8B:72:1E:CD:1B:CF:FF:05:C2:98:8B:5F:C4:33:B3:2E:A1:FB:F1:12:28:6E:32:E5:DC:72:3C:39:7F:94"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapp.xolura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:39:16 GMT\r\nexpires: Wed, 21 Jul 2027 21:39:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97713\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T03:29:03.934383Z","times_seen":243295,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":31,"connect":29,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/assets/icons/icon.svg","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:51.098Z","timestamp":1784767671098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/assets/icons/icon.svg HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:51 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 928\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-3a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":928,"size_decoded":1179,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38174c3cb0ad47bc36174bd499ac5d72","sha1":"91a2d3e65a6be0dda2955090389d9cb8ff26b1d4","sha256":"dc47ce412e4f9a5a51aad5e2879c3c9398458a710708861bb325ec03c2893f9c","sha512":"13ec663316ffd6b0839bbe1a34ac7011a29503a3f7ba9684f15a7af5655b53fb7b32066ac14d778f1f2efbaba24d28f05cf00725be6d6fbabee3c651dba833c8","ssdeep":"","tlshash":"a211c005a18e72c46611c3e458d8dee12153ef2b8b888d2d72ad0c881f5b48b9d97424","first_seen":"2026-07-23T00:48:24.290821Z","last_seen":"2026-07-23T00:48:24.290821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T00:47:47.385Z","timestamp":1784767667385,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 178\r\nLocation: https://whatsapp.xolura.com/app/whatsapp/\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T03:24:33.01586Z","times_seen":17467192,"resource_available":true,"data":null}},"time_used":1102,"timings":{"blocked":-1,"dns":62,"connect":256,"send":0,"wait":254,"receive":0,"ssl":530},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/scripts.ed1ea1e0d2e942ca.js","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.017Z","timestamp":1784767669017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/scripts.ed1ea1e0d2e942ca.js HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:49 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 221269\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-36055\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221269,"size_decoded":221534,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e2e9c09d75151a75e719d1a1c678c2fe","sha1":"1019d0f60bc8c077e3ca1b1987682dc0ae8c0d11","sha256":"9923f8f7622d096710bfa8b0476153e559643525f56bcfeb4cc846c4f1bf88c0","sha512":"9e7a8602a90612853af955a9f6539314952e71a5b42488d439048505c0e3402438553671d8424488f7da41aee826edf97b1e2ea8d352073255a12ad4572dcfdc","ssdeep":"3072:9Du6aG6BYtLSfLdBgkH7Sxx25JWkyUM9iE0N9eXh0UX17sLPGP:ZaCtLSfLDgcSb2bWkyUEIqLX17WPGP","tlshash":"be24288a3295b432469f6479807f050fb6322e9d944aa018b65de8dc3dbcd88613ff7d","first_seen":"2026-07-23T00:48:24.293634Z","last_seen":"2026-07-23T00:48:24.293634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1743,"timings":{"blocked":-1,"dns":0,"connect":249,"send":0,"wait":497,"receive":746,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.9.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:51.158Z","timestamp":1784767671158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:19 GMT","end":"Mon, 21 Sep 2026 08:39:18 GMT"},"fingerprint":{"sha1":"56:2E:0F:D1:D0:27:1F:92:D4:39:8A:28:B9:FE:ED:D0:51:56:59:00","sha256":"50:B0:8B:72:1E:CD:1B:CF:FF:05:C2:98:8B:5F:C4:33:B3:2E:A1:FB:F1:12:28:6E:32:E5:DC:72:3C:39:7F:94"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapp.xolura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:39:16 GMT\r\nexpires: Wed, 21 Jul 2027 21:39:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97715\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T03:29:03.934383Z","times_seen":243295,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.9.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:49.258Z","timestamp":1784767669258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:20 GMT","end":"Mon, 21 Sep 2026 08:39:19 GMT"},"fingerprint":{"sha1":"2A:E6:04:0E:76:A4:02:27:67:28:31:4D:E5:61:19:26:CA:0E:32:84","sha256":"D4:ED:C4:F8:DB:31:8A:2D:35:15:01:14:C0:49:CB:47:FF:5B:CC:17:14:82:63:9B:A8:6F:61:4D:AA:E5:96:94"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Jul 2026 00:47:49 GMT\r\ndate: Thu, 23 Jul 2026 00:47:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1637,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-07-23T03:03:35.623167Z","times_seen":27436,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":22,"connect":22,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.9.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:50.990Z","timestamp":1784767670990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:19 GMT","end":"Mon, 21 Sep 2026 08:39:18 GMT"},"fingerprint":{"sha1":"56:2E:0F:D1:D0:27:1F:92:D4:39:8A:28:B9:FE:ED:D0:51:56:59:00","sha256":"50:B0:8B:72:1E:CD:1B:CF:FF:05:C2:98:8B:5F:C4:33:B3:2E:A1:FB:F1:12:28:6E:32:E5:DC:72:3C:39:7F:94"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://whatsapp.xolura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:39:16 GMT\r\nexpires: Wed, 21 Jul 2027 21:39:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 97714\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-23T03:29:03.934383Z","times_seen":243295,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.xolura.com/app/whatsapp/favicon.ico","fqdn":"whatsapp.xolura.com","domain":"xolura.com","tld":"com"},"ip":{"addr":"128.199.171.235","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapp.xolura.com/app/whatsapp/","date":"2026-07-23T00:47:51.100Z","timestamp":1784767671100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatsapp.xolura.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Jun 2026 13:16:37 GMT","end":"Fri, 04 Sep 2026 13:16:36 GMT"},"fingerprint":{"sha1":"CA:03:16:F0:81:D3:63:C9:51:37:6F:A4:11:FA:20:F2:36:97:0D:5E","sha256":"FE:4D:3D:0B:DB:31:08:BE:C5:21:9C:1F:CF:F8:2F:E0:36:9F:2D:E3:EF:AC:AC:71:A2:B7:ED:D9:74:08:EE:AD"}}},"request":{"raw":"GET /app/whatsapp/favicon.ico HTTP/1.1\r\nHost: whatsapp.xolura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.xolura.com/app/whatsapp/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 23 Jul 2026 00:47:51 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15406\r\nLast-Modified: Fri, 17 Jul 2026 09:11:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a59f1d2-3c2e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":15659,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2d986dd850bd14c427e5b0e52fbe8301","sha1":"a3df91dd8714bcb62ad34c45c2bf1cbc9f0934f8","sha256":"4756add883fc61b2f65307aede86ebc3fd8036231d0cd1c96c99c1a1ec92d948","sha512":"a65634a70a315e0deaf3d1da18a0c4c36de18119d032615b884c393de9c9ac3b3dafa22276cdbce74b6bffac0251efdb91335c2d91980cfe1413fa05930a26ad","ssdeep":"192:DBbG9py0m5Ii6k64HiP5AecLoAeZ9kDLK/Sr/QY9XuQ9upM89/aeLj:dbGWZd+P5NcLorIwSp9VupaeL","tlshash":"c2623a919870c114ed6b1b301d6d0e161e1fec4beb74e6893b8fe0512bebfe34025a5a","first_seen":"2026-07-23T00:48:24.297417Z","last_seen":"2026-07-23T00:48:24.297417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"whatsapp.xolura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"whatsapp.xolura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}