{"report_id":"21d4838b-13da-4a00-98bf-b92b8335237c","version":0,"status":"done","tags":[],"date":"2026-10-09T06:15:10Z","url":{"schema":"http","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":0,"asn":153523,"as":"Ummah Host BD","country":"Bangladesh","country_code":"BD"},"final":{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"title":"🥵CP Group 🔥","dom":{"size":62566,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30272)","md5":"983213ac969c339435e03cd3f6522c35","sha1":"f77aa2324f10c9726995a9f89b34ec7b61437688","sha256":"3cc11e10c169758941f29062748196ff5caed3266548cd92b8f4c83bf0a25d65","sha512":"c5de60eea6d59f3a5bfc89745df038d9a7e506f72a859795e89637a4e47c5848de5737988978384e29aac4971e13b7c1dec4ca4ce1af9b40518f4ff1631690d5","ssdeep":"768:yLFoRoOrBFU6DWyGtR8I8bVq1gT/Leo/C5U0Abz/agcpSG0:yLkoOrB1DWV8I8bVaXvm/aPpSG0","tlshash":"0b539691a9d69027b553c0592fe1eb0c3ae9e507dcf3444cb96ce6844fc3d9e6d2b288","dom_hash":"domhash627d628e250224ce7c1b4c44be15f771","first_seen":"2026-10-09T06:15:13.647775Z","last_seen":"2026-10-09T06:15:13.647775Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":0,"asn":153523,"as":"Ummah Host BD","country":"Bangladesh","country_code":"BD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T06:15:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-10-05T08:57:44.698487Z","alert_count":0,"request_count":1,"received_data":90485,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2026-10-08T17:04:07.914074Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"chat-whatsapp.nijz.site","ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-10-09T06:13:49.630768Z","last_seen":"2026-10-09T06:13:49.630768Z","alert_count":33,"request_count":33,"received_data":734726,"sent_data":19021,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"k.top4top.io","ip":{"addr":"65.21.235.194","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2019-11-19","domain_rank":2923960,"first_seen":"2020-01-06T07:43:09Z","last_seen":"2026-10-09T06:13:50.277658Z","alert_count":3,"request_count":1,"received_data":699,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":541207,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":1,"received_data":79929,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","size":79150,"data":"","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-10-15T11:16:51.858507Z","times_seen":7915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b5501e24d5c1e64ba87f3e027b478f9","sha1":"54991698f26ce9cf86abfb2ae3ed2c54dd332bce","sha256":"bca37dd5ee805ce5ad077f0db9e5c9a8fa8b0d72adb029995df007bb028681c5","sha512":"3546421394cccc2e4f57a65470ce41f83d4c618d8c7cd4f4b4a21f688a426b156d2e3c70abe65509564824a3a41cde65dad378cefc04ee858f24754562977fac","ssdeep":"","tlshash":"8dc09bcc211e5c7155e727448b7ff704b441321ca5d56a314d1a63455d30e2fd759854","size":149,"data":"","first_seen":"2026-10-09T06:13:54.148654Z","last_seen":"2026-10-09T06:15:13.723017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37d87cdd408226ab9f45833c4a2a8e98","sha1":"6e21888bf327ae9e4e5c1bd396c024ab1ea64de7","sha256":"0105dce2caccf68dcfc0e66c0ef79e8e8fbce2670cd63709092975efcf3afa7a","sha512":"32ebebdcaa2e6f859ecef126a48830091df727df6b35dcccbc4dbba1f60e2e634cae7f4c84f9f886e044d97207effdb1e720b2d86e133850d6daa80fe68bce7a","ssdeep":"","tlshash":"56e02bb95b7d052641219114585f9006182131d39e193d3c3f4dd2a10fa896ed2f3ecc","size":333,"data":"","first_seen":"2026-10-09T06:13:54.151439Z","last_seen":"2026-10-09T06:15:13.724174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d4653711f46913ca6082f43849a604a","sha1":"9aed47d44f6f8916b4b141f6a29f461af1dbdbb5","sha256":"1a3be62d3f95994476326e063da655060ca3e53ad4197014b970a45a064c5642","sha512":"311d686495f2b18ee3a452e66aee0cd0396a622913a3ef4425ec416552fd4a7eaec98a3562a8bdda2615f1a1e8c690bf47274327e3e41789d6d5409a0cb49828","ssdeep":"","tlshash":"e3119c977293452785abe27adb5343542820d0233c12c02d791ca5216f6dea5e9eebe0","size":906,"data":"","first_seen":"2026-10-09T06:13:54.154769Z","last_seen":"2026-10-09T06:15:13.725074Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed70d27df07b933c8819468705b87076","sha1":"12464272293bf64d958d8f94edf906f671a00b42","sha256":"81728785d5b2434a7d9e217bd81feff9b6ae9571ca7a8ca2d4d211ecfe3a5916","sha512":"9afe576a34cdde8de44c6607e1a70a254f3da3a5fe21f127f133b2a3242ec3bffd1d5c3b7df57908a9b37230cbc09836259e7d48fb38ca0bf3dc746ebffdb28b","ssdeep":"","tlshash":"0231cf84fac6209afac5a1196beb5001b4f9b20b0d86cde0791ce1218f96c107dfe4da","size":1702,"data":"","first_seen":"2026-10-09T06:13:54.16596Z","last_seen":"2026-10-09T06:15:13.725858Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"927632484eff4ba226d0934187e81b55","sha1":"bf0135f6c2b00300a23a396c5949433aee7fbad8","sha256":"c730b54492e845fe8d26c9b09eb95c626439f985ebbee183dd67c5d855a94c23","sha512":"863292ce3e96ff58f9df83b6a33a6b3e57177c0c84061f2393b607b50ae105b8d2a176ebe04a5e727ccb54b1c8cc6270c5ea303ece199a3ead62665e8d5b5811","ssdeep":"","tlshash":"3b21660df8f71218507f71356f7f98086c26352b128aee407c0d9ac08f9c6ba650db98","size":1257,"data":"","first_seen":"2026-10-09T06:13:54.168207Z","last_seen":"2026-10-09T06:15:13.72978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ab87f08fca7bd73abb8c6d3e181b5ff","sha1":"20cd761dffc3112e346a36549cc84770c09f73e0","sha256":"dc00ba159c95bbd14072b0ca43f9279106d589a2c7ddf08ebb3992c724926070","sha512":"07bdcf7ed6ee155bdb6b2a307927a2419b3248f5a1d32cd51163f5f01c36126e073ff1bdb71bce4de1953a0751c2514b0481825bd515def9e0a6d02c84b8c4d1","ssdeep":"","tlshash":"2241bf5ebaf7197245db61256eaf029c34b5010b2c02da057efc41504f78e7fa25a7ac","size":2240,"data":"","first_seen":"2026-10-09T06:13:54.171349Z","last_seen":"2026-10-09T06:15:13.734313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-10-15T11:36:02.255327Z","times_seen":510728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BX0PF8Z11Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfc0c243b2f5530e9322c6dbfc81d172","sha1":"5aebab8e18b5c69804f7aec894946c4ac07d5efc","sha256":"85a061057d9fb87239572cb9a0eccf42beb7b1837850f7f3cb703891d8c09ee6","sha512":"9de64719cc6fcf81ba7be18cdf0ec9e03811a5979189e63841102910560b16b91a634870a570e48940f4183a4ac0a89c11a9aad0e2d601588e761d45fbab8f2b","ssdeep":"6144:rjsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:ZEKmWJmc/Wu","tlshash":"a6b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","size":540603,"data":"","first_seen":"2026-10-09T06:15:13.704919Z","last_seen":"2026-10-09T06:15:13.704919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.1.1/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.923Z","timestamp":1791526475923,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /releases/v6.1.1/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Fri, 09 Oct 2026 06:14:35 GMT\r\ncontent-type: text/plain\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a47b3efaaf3b56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T11:37:45.85416Z","times_seen":19120158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/14.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.971Z","timestamp":1791526475971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/14.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20344\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20344,"size_decoded":20631,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 419x575, components 3","md5":"0064a08f5ab6566164bf114925659a9d","sha1":"9c61a9659f1838d4578acea29a0323b27a0360b6","sha256":"3717de01bd76d327cd1ff7b2e67a82207f6ade0e5c5ee377085f0a6964ea3754","sha512":"bbcebe0ba347265e17b97b09445c1044dadb503440ee8f6e924c9a5d661634c30f5bcdc9c666b8866135eafc22ae38778f62a1f852e5dd30d49295f697a7f06f","ssdeep":"384:VkcJh10qf4SyHtD9DIgkoNqX8BIg8bQi4zdey2nhiIKeHH6:P004SItJDIToNqOIBbQFzmnhiIb6","tlshash":"9092d0341681595ae85e223e365c8bd3b344fb25a0f6ad8141d8077aaf594f30dcd89e","first_seen":"2026-10-09T06:13:54.138888Z","last_seen":"2026-10-09T06:15:13.653782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/Te5R0J3.png","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.977Z","timestamp":1791526475977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/Te5R0J3.png HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5904\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5904,"size_decoded":6189,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0135a0a39ce5c7bb52f4df409ae1644","sha1":"33b572612958920cd3b39e8f687358842618af6a","sha256":"0eb2206685e21591405c4cb9a7cca93f9e366a47c83879adbc751fe283ca4abe","sha512":"6a9fe484e7f067b0c90208c7cb3a243e3acdc9a04ea4d4eecce1b5ca4325da36b1d4452b5a5f42c8d3552273eb44fd89bbe83f72ca0d2744e9a0664e35b78cb5","ssdeep":"96:2W488SjPL2CvejOqkXoXCoJ7a0hC4ImivRB9vrp+fpIldMx5VqqNrMAx5:s4PjvfqkXgC+J0IBmdQVqqNQS","tlshash":"75c1afde0f7b400fb032dfc7211d55217e1b3a74ae1c7502c001682e0faa75a145aeca","first_seen":"2026-10-09T06:13:54.111334Z","last_seen":"2026-10-09T06:15:13.657888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/7JOa3P1.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:42.524Z","timestamp":1791526482524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/7JOa3P1.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14123\r\ndate: Fri, 09 Oct 2026 06:14:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14123,"size_decoded":14410,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 275x183, components 3","md5":"6636dfb58ef8c4e304b130bef2114c80","sha1":"fa5c13153f08a1b037764981a97536f096efb304","sha256":"40aca2379b399e9247fdfedf693c379edba4479fa6f76e708dc92a42560fd2ac","sha512":"6d2935062da11958718605f164fc54e2ccc33df4e0ca8c69e1f8a181209de6d28d7a0fe4c8a9ddee978d7c6817cc8fb5efe06b03afd86052c5d4d09fdc81310e","ssdeep":"192:CvHF5jNujDqY+TDte7w9SblWmDNCG+IWNSJKJTr99aOGHT0sfptzjB02QyCNN1c3:mb+qNsk4OG+IL49aOGHT1Xjujb1cqy","tlshash":"3852c0ddebf333d273899a1c1d462c06a34b6dbcc365691249c6ac162ccda83379b6c0","first_seen":"2026-06-22T14:05:02.131718Z","last_seen":"2026-10-09T06:15:13.658774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/zz.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.940Z","timestamp":1791526475940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/zz.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38165\r\ndate: Fri, 09 Oct 2026 06:14:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38165,"size_decoded":38452,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x815, components 3","md5":"d319823b8098ddf91f1c3430e2d5bdcd","sha1":"04fef347699666068a8bb4ca4ed6dbd336a65d88","sha256":"7148ac3979e21f0eb64a0abcde6bfd652183a27803a9bf0f74ae7cb8b7c6d797","sha512":"e363b43394ce24c03540ae55949e14a6fcec27763024c70b8dfa76da9992e47a0b86c0ab5230e4a502412d0e06a3a17aa1686eea5ad7cdef108c4f5dcf00fb8f","ssdeep":"768:CpCwKj85zTOhx2RCPi83JW+9sZaGCPwy3GlcrFNJuOFsQ54HL98ybJNI3spjij:eCD4fOhKCrRCGP3rXgOaA0h1IcpjC","tlshash":"e403f28d23b5d3eaf9975bf05cdda7c439b2a0a146a14f20a054a3fd789c9f8947044f","first_seen":"2026-06-22T14:05:02.137811Z","last_seen":"2026-10-09T06:15:13.660215Z","times_seen":3,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/5.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.968Z","timestamp":1791526475968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/5.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58664\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58664,"size_decoded":58951,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x341, components 3","md5":"a5004fa05f36e432c4108321dcb2dfe6","sha1":"296262c053375c3423d0b3d75b26b6a00944dfd9","sha256":"bb682394b0f85f2754d48a57d0cff2d55c526446a68d7a9b8e231ad8806e1e1c","sha512":"7167b237c652fed97043dcaced777c0d2f517c48dea12d18d31a12e8d888deb2f065cf9ae929fb5cb82b7f8427e5e4ae2255d332562274c08091dd3053969add","ssdeep":"1536:sHMCS1pBTAFmXNDHOl3hra5YJ++A7+nq8MAK:sHMRB2m9D0hO5SOAK","tlshash":"2c43015427c93f44f365b7ba92988801b7e2d1217fd9e20d029ee680a7e54bf4af8055","first_seen":"2026-10-09T06:13:54.137208Z","last_seen":"2026-10-09T06:15:13.662748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/1CnAQm1.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.975Z","timestamp":1791526475975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/1CnAQm1.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6733\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6733,"size_decoded":7019,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"5601d126494946d0959ea56e1786f602","sha1":"8cb8c79b68c9eb8880211d77ad5bf559b3105d0d","sha256":"9b845afc03ceef5b3a0acf2d77a57039f84191375697b55a35945a184f143a54","sha512":"4b2f3afca3e96447a2c616aa68529280cad395d2dcc60d5991790148c2c5a8bdeb256e4b146c5f570cfb207139eff0ad003c71254d54b2cb96a2e99f342e121d","ssdeep":"96:dErnvB0fe8UE3YjuUa6W3Qvs16h7pmSXpXkZ1zIzKMS/bNJau+C5wSXpcxs:dCimUJUaTsY6hFmSXa2STxKwpcm","tlshash":"90d19e66c56103f58bffb9e827379cba0a61205739055f69b9e18311751b8c83a14bdc","first_seen":"2026-06-11T20:40:06.686707Z","last_seen":"2026-10-09T06:15:13.664398Z","times_seen":10,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/atPn1Y6.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.976Z","timestamp":1791526475976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/atPn1Y6.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6856\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6856,"size_decoded":7142,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"0e6075856a062bc3b81989fbd7a4e6c0","sha1":"94f634001d3c39f6d1fa3c5378f699d46ccde46a","sha256":"fd2545a61fee266e0b2a7e8446c679b9f5202f8656c883f1fcefb66cb6aa68fa","sha512":"5b0cd8952a6efc9cb13fdc4c54316356ef4f063659021985bc23e200bf6f9943c2b09e5fdc1577631fa6cd4376e6f9af847e62a0dce563fac24b83840fcceb43","ssdeep":"192:dcb1M20zXPuEXXl7LJURrRCPpvoAIV7jdI6:dq0zXPlXl3JECPp0V3dI6","tlshash":"0fe19ed70722538681eed5f2b5319b4ed4cc3ec2ab4c170d842185eebb65b0da8f9399","first_seen":"2026-06-11T20:40:06.679595Z","last_seen":"2026-10-09T06:15:13.665112Z","times_seen":10,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":955,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/JE4SubV.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:50.557Z","timestamp":1791526490557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/JE4SubV.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5479\r\ndate: Fri, 09 Oct 2026 06:14:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5479,"size_decoded":5765,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"1703f2aaea4c201b6c26895577715693","sha1":"03bba849270ba6e4d8c7e08f8086381f3dd01ab7","sha256":"61bbe8bd80efd4c8c0c58de46f65bf94d58f10933e41a352051284466761a40a","sha512":"f1faf9b7316295c47628f8c54a5afaa620dd7e132643961aec909fdb6814f3c0e57ce33ec31672d58424f0d28e33887b626e9f58bfb13024df376e81bcfd76e2","ssdeep":"96:dEk9s7Pl4kJxOXPJ8sRxIYvMMjj25P5YVQDE5HY/lJbpkZLyX7MJtq:dBAmfP+sPIYEarVQbJ1myrr","tlshash":"08b17d055e5218805aa29af96b0524fe774ab25e798839cf7466b352371c1e7500c73f","first_seen":"2026-06-22T14:05:02.120113Z","last_seen":"2026-10-09T06:15:13.666172Z","times_seen":3,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T06:14:34.302Z","timestamp":1791526474302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Thu, 13 Aug 2026 07:38:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6019\r\ndate: Fri, 09 Oct 2026 06:14:35 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":32669,"size_decoded":6328,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"057c9e8c737d1bba3b6961fc07bb9820","sha1":"0f1197e92cfb4d781bfa32120f367925d317c9d0","sha256":"81178ef1e0562d65ada2612b815a87f102fcc146470ed4e09d7ae5d80ed82e61","sha512":"86d1b51581f7f1ebd8e12bed65a444f9c47e6aefedc5ff9df4162ab97e1e4c1e4629c4c96bf60499835f51c5a51ad8f7ae7509f72bae389b0a67b6bb0c9fb4f9","ssdeep":"768:zIFoRoOrBFU6DWyGtRUeo/C5U0Abz/agcpSG0:zIkoOrB1DWVpXvm/aPpSG0","tlshash":"c6e20da664f714676183d0c02fb65b0a3ad5e607ca4bc5093eac37899fc7ddadc53288","first_seen":"2026-10-09T06:13:54.145861Z","last_seen":"2026-10-09T06:15:13.666986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1078,"timings":{"blocked":0,"dns":222,"connect":198,"send":0,"wait":452,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/3jp614G.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.947Z","timestamp":1791526475947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/3jp614G.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71437\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71437,"size_decoded":71724,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x800, components 3","md5":"8cee4d7aca80c055e92909d82f23df82","sha1":"33798060c91eeadde11a1f7075088a6513811d4e","sha256":"30ad9d5c9d9db38e3be2c513ef4be2109ca800d4a90830962198278be9480368","sha512":"6c3e7674564a043b99a0fb3dee59653b71636f2c34176ef5ff69cefa391fa96e01d88fa47f12a44add01c857cae069991cbd36e9e53cdac227c9463e34c33e82","ssdeep":"1536:uBpaWeZEQEtKrsX7lFQsy2ESM9FialEudAmBokDo+5+:uBDeZMKSNy22iDuskDoz","tlshash":"9963026567f358ebcd8be2f017a437363275d4b9c082910afc8a6e4946d2ce0667487e","first_seen":"2026-10-09T06:13:54.147146Z","last_seen":"2026-10-09T06:15:13.667907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/2.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.960Z","timestamp":1791526475960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/2.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107433\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107433,"size_decoded":107721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 666x740, components 3","md5":"9bf7ca9589e96babfd6a396bcaf54d23","sha1":"b18f26f4eb0a32c24f13959fa86c0f1741c4ac4c","sha256":"b93aedc14de744673d3ad458e8512054845817e53cf3f772e421fdf81f3f1b4a","sha512":"d0778e9c5200d427fa93e31103f2d0ebc0a186d4e95cc67aa347f34d1154c1e9c8c1cbcc444efeac43c5d2803297e220dbd0d0290cd682bef992cd86933fcfb3","ssdeep":"3072:Uq9aMrv2FoHwU28MpfA0RFsWZkiM5A3UEn:UiaMSFk/282FsZirU2","tlshash":"08a302b202fa97f5fa5c56b186bee9db93cd348c4a7fb7c350793a2d501e2d6050a801","first_seen":"2026-10-09T06:13:54.135282Z","last_seen":"2026-10-09T06:15:13.672826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/t5ub6aP.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.966Z","timestamp":1791526475966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/t5ub6aP.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4634\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4634,"size_decoded":4920,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a58a45f9ee99a8fb4ebeecf7786f3e7f","sha1":"f3252a1cc7954973b11abc6110b718801fc0bc7b","sha256":"feaeff7f97414140cad5eb0c7d8796ec23030c116d4bda546ae714bf7f164835","sha512":"c4b02de31de09c1dff74637793c739f03f8a885100707285f27d873c63b5b4f617fc681b3e02dbdc03f0e87f4e92e92892f6356d35cfd1f9ee7bf05813d2292c","ssdeep":"96:iBaK4dGHr0vZsqEceIIrH2MI0MZ5OyYbjHof6IyZbEPQnV:4azGLJ+Ir237Z5OlbjHze4","tlshash":"dba17e49967da14d212bec76805f8bc0a72e600754e8b0083b9a5b71f57f58792322d6","first_seen":"2026-10-09T06:13:54.094428Z","last_seen":"2026-10-09T06:15:13.67374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/favicon.ico","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:37.136Z","timestamp":1791526477136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 09 Oct 2026 06:14:37 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-15T11:01:33.539913Z","times_seen":159250,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/2oHJXZn.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:44.527Z","timestamp":1791526484527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/2oHJXZn.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10744\r\ndate: Fri, 09 Oct 2026 06:14:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10744,"size_decoded":11031,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 301x301, components 3","md5":"364eeb898495710015c5012273962717","sha1":"74808546d1ead8fe1bca4ac16b94c4252a9ca077","sha256":"b74db399085c69c37265812e83bd83d6bc8759d5068af54aa048ae821840450e","sha512":"94d69e4db8a5191a450d09571243a4435a9fce71ae4893ab3e1425d77a766d1fe833c03cb0eccc70c44f204d2912ee6366a6cd855cba7dc22e9e52e771204bbd","ssdeep":"192:ncjRSJX1cnOVXxT3Sd9kwCEiYIeYUfkMvnd3/6vVX8g6eQeF7IDb:cw1WnO+d9q6Llvnd3/6d8kQ07IH","tlshash":"0d229db11c914dcef6fd903aec71e0ca6b92dac618a317a51af9fe56f299cb18490044","first_seen":"2026-06-22T14:05:02.121336Z","last_seen":"2026-10-09T06:15:13.67575Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/lTD4rsn.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:48.558Z","timestamp":1791526488558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/lTD4rsn.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13773\r\ndate: Fri, 09 Oct 2026 06:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13773,"size_decoded":14060,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 209x241, components 3","md5":"e005ee0a81e26f57487c15f045de8ea2","sha1":"b0dfa0003c92988354b29c423bb6b6651b153e7a","sha256":"daeb47a2882a9b3d5e891d1dd7698a5f3c879ae7d4b4f35f5ba4461280db4080","sha512":"467570915500be7bb87fd4f1195bc16bcac80b38ac931fd0f5d677a119b35c7e1fe4c6624f32c07e29cdcbbc4d76e1903886f04ce65a8aa6cd708a1efb9bf794","ssdeep":"384:Js1xhKhcNZ765UGcov3GSAU3IoxUGJXEiwG:whKC7wjcgGnkIolJ1wG","tlshash":"ca52b05b16ccac8e7d455c1901b46e49bbdef08ccaf8c4da5fc38486bd8d68a1261e27","first_seen":"2026-06-11T20:40:06.673157Z","last_seen":"2026-10-09T06:15:13.676515Z","times_seen":9,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/3.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.962Z","timestamp":1791526475962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/3.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74971\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74971,"size_decoded":75258,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x555, components 3","md5":"2933ee0c007b4a79cd42c30b8a86420d","sha1":"4034dd4cc9a2fb74d7f28ad195e9c944b87a34bc","sha256":"9409459a5677b6c4f657d6dd34efc48746f2cb3eb8edfa34c5449c61ab5ba1f5","sha512":"b91f5246edad9cf0d36b98f0ea9f189645bd0b8b05a068a4f4b064c3d5a78ba52fc95fadfae2971cf76960223eea60ade88dc3766e6ca8ced30822b21db118c1","ssdeep":"1536:jaV4nVgWb+JIhhaKvUyQ5mMAK/7qzWkwXOlPlt+7yebKpd:Sut7ha0UT8MAQqKtAPlt+7nbed","tlshash":"b07302aa823e24d6d8238ef4a518fea937c9d748f33f3d14aa596f1463264de70f4411","first_seen":"2026-10-09T06:13:54.091527Z","last_seen":"2026-10-09T06:15:13.67796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":394,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/qpl2xCH.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.964Z","timestamp":1791526475964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/qpl2xCH.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15929\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15929,"size_decoded":16216,"mime_type":"image/jpeg","magic":"ISO Media, AVIF Image","md5":"99d9074c414bfb46a11f2d2d6f8fc573","sha1":"158655a9fb5412138a3cf8e5f51ef9a80f9c77a2","sha256":"df285a06673144af601714874413504abc9881ed80a8d8af61d5d6518f3509ca","sha512":"efce06cd3e3c87311627c553b6835d3b823e69773d0c26e5a20e4fe80fc3a692980f5ed333d84d219d23a3280395a2b5700cb841e714dca93706199c27a313b1","ssdeep":"384:rBWTktxt788uLoPbF0O3n/hQcheuN7n/+n0pbCVxfVUyXMcX:ZHFjBTXGcHAYC/nXX","tlshash":"2962c09b6bc56432eb05e470d790f4a95535c889647703ee6f21e67a428a319c08fcdd","first_seen":"2026-10-09T06:13:54.083564Z","last_seen":"2026-10-09T06:15:13.678962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/4.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.967Z","timestamp":1791526475967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/4.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67566\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67566,"size_decoded":67853,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", baseline, precision 8, 574x508, components 3","md5":"4f48f9d050679d2248a4274b3d3fe0f8","sha1":"35fbb1dd7c674192bcc680d93a646eb8156435b8","sha256":"cb9641d066bcffdb1ecbebaaf9dd78bb24dc1a0773ab7df65fe4ea80f05419d4","sha512":"21014b378fc7658877856972aed542a1e901147775515e41ab070834ad7a5d3cf5848363c135d45f388ef88f6eea942b81b0b8e1ae7ecbba39b0c088eb21a503","ssdeep":"1536:epuJBhVW5KSW84pC38lNEWLZP4A2eQHLCEbkF:Bw5Kk6JQdHmEg","tlshash":"05630248a3e7fbe43a2476b8e6264d772c019b7b46900b479c5855e02bd6f22406f2df","first_seen":"2026-10-09T06:13:54.084882Z","last_seen":"2026-10-09T06:15:13.679916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":962,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/15.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.972Z","timestamp":1791526475972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/15.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17929\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17929,"size_decoded":18216,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 483x409, components 3","md5":"d04f15f15b06bb1b2a02692412d9c3e2","sha1":"9b07e14e2240e89301b8cd8be08a2f39ffebc49f","sha256":"7e96fd0878389acc8dbaea924a8a54df03f298a6b51befd8fa168c9b291eb00e","sha512":"e475792d9098053437405fcb13ccf3f87d0cae1834732254b49e5c276ece64c1e26fc7485fb9626cecabfd903a3b975cafcbeedb6500df271757511449620b0d","ssdeep":"384:KTGXq6NRSfm84OxrgcPB7Bo4t2uzk+Dskw7DDNLWdx4XtHc:KTKq6NRSfm84Oxl5q4t2Ak+DaDhLYW98","tlshash":"7582d067d53ced5cd0f454ba5f6ecfd56be8c21b4564eee2268b09018d8e2533c08948","first_seen":"2026-10-09T06:13:54.095768Z","last_seen":"2026-10-09T06:15:13.681034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/F5lXH5m.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:40.537Z","timestamp":1791526480537,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/F5lXH5m.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13337\r\ndate: Fri, 09 Oct 2026 06:14:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13337,"size_decoded":13624,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 225x225, components 3","md5":"85541013ca3f6152e034a56d88c6f8d5","sha1":"ca2ae0f3c81ff623203bef3a7baa7e162d21958f","sha256":"71ad01043933a0bbd0de3edf36bd8aaee67bbe38ffc2ef541c5bf81660d3ef15","sha512":"9bf4406c87dfaffe0ab0d0cfab537c6b199f75a9d6ed8216ed7a21cc8a3a0b18e3762e17f4eaa36fe9fec762c8c19140ff4e187a5f1b5e04e5c7570b9252c59a","ssdeep":"384:GkageiayL2ncFivZgHVvHWlChOeMjNtcu5:GbhyL2nqiYRHWlIOau5","tlshash":"d252bf589792d5fef0a2a37f37755e45a8cdfbb016616dacc4c98d960c710f152ac220","first_seen":"2026-06-22T14:05:02.142237Z","last_seen":"2026-10-09T06:15:13.681899Z","times_seen":3,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/fang.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.973Z","timestamp":1791526475973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/fang.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10337\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10337,"size_decoded":10624,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 251x251, components 3","md5":"1b3867652fef4964ca5b86188130d654","sha1":"6b7261dd0f3a736ee605922f3a91b074778722e1","sha256":"2603d3faee997388607b77bda10f970f9568b0856984b23b1ba003d1e6215f71","sha512":"de3e09f94b9b56e49083e22fc9ee5da447d519878b27c6b8d8a1eb29b74d840451bf5e3d6be34d590bedc09214838b15c0ce5577a704d48e6f85aff487fdf7c0","ssdeep":"192:LvF3CeQc+cvriDTld69iuG2tsq91EGKebnm87uCFctF9T8yKO6mMkJFJkPkL:LvRCe0cv2Vd69iuntsiEXerqcy/pNuA","tlshash":"8622be4d9906ecf579090cb14243ee3f4bc91ac5b20d068d73d85a9ea1f6777ed44782","first_seen":"2026-10-09T06:13:54.09967Z","last_seen":"2026-10-09T06:15:13.684882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":956,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/images/fang5.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:36.095Z","timestamp":1791526476095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /images/fang5.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-15T11:01:33.539913Z","times_seen":159250,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":836,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/1CnAQm1.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:40.535Z","timestamp":1791526480535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/1CnAQm1.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6733\r\ndate: Fri, 09 Oct 2026 06:14:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6733,"size_decoded":7019,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"5601d126494946d0959ea56e1786f602","sha1":"8cb8c79b68c9eb8880211d77ad5bf559b3105d0d","sha256":"9b845afc03ceef5b3a0acf2d77a57039f84191375697b55a35945a184f143a54","sha512":"4b2f3afca3e96447a2c616aa68529280cad395d2dcc60d5991790148c2c5a8bdeb256e4b146c5f570cfb207139eff0ad003c71254d54b2cb96a2e99f342e121d","ssdeep":"96:dErnvB0fe8UE3YjuUa6W3Qvs16h7pmSXpXkZ1zIzKMS/bNJau+C5wSXpcxs:dCimUJUaTsY6hFmSXa2STxKwpcm","tlshash":"90d19e66c56103f58bffb9e827379cba0a61205739055f69b9e18311751b8c83a14bdc","first_seen":"2026-06-11T20:40:06.686707Z","last_seen":"2026-10-09T06:15:13.664398Z","times_seen":10,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/fVqQxE1.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:40.536Z","timestamp":1791526480536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/fVqQxE1.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13606\r\ndate: Fri, 09 Oct 2026 06:14:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13606,"size_decoded":13893,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 259x194, components 3","md5":"43253f3dee987dfc7f5c2d418197de77","sha1":"6f0967a659149e201a98ce0431b3e2fe9bccbcb1","sha256":"68d30c716ae2ef474c9d2d2c70da52d82c2adf37b705d82e19196fb5dbd4536c","sha512":"7cf28af5aa76e3316dd635aed20a72628e849671ac71c45dac4e8b4173b0f1ae24dd0715021a53cf0ebfcb774a15e6cb4f92450e29c3aa810174decbc5f44e65","ssdeep":"384:Erru5P34F+pS7pOC27sC8wym3djw1XJlxO:aruR32NFesC8wyT1ZXO","tlshash":"b152bf14d762cdcde9234b7ecd42dd40a3d8bc6ae02e519c7ac4ce9a4a8cddb41248ad","first_seen":"2026-06-22T14:05:02.114298Z","last_seen":"2026-10-09T06:15:13.685766Z","times_seen":3,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/IMQzdvw.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:44.531Z","timestamp":1791526484531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/IMQzdvw.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10699\r\ndate: Fri, 09 Oct 2026 06:14:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10699,"size_decoded":10986,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 301x301, components 3","md5":"40b5ac2f6c46e9edaf976cc551fef2f0","sha1":"e01eccc7d025c7568dfbb2f696546860ba107401","sha256":"ba3f22509adb67eea20a4eafe109d2f5dc9fef5bafaa3b4fdf8c1a95a3d785d8","sha512":"45c3ab8b30b72c6b1728aaee0fac11f2aaf5bca4d0f50da62e23bcc77f4cd83ce68505725e4699e4c413c904b5c0c31bed041a2a4babac97dfa8cfb505f06f6b","ssdeep":"192:nx/WcZ9IAUrvcibETLblVvCvgAeJ0fgK+SUfOXDR0yVtUZNBQ6WZKgr:cGMvrbIHvyQygK+SDD+NWIgr","tlshash":"dc22bf1e52cbbe2fdccdcefb3275ce2602982436a13374517848045db55b2ad252a8e5","first_seen":"2026-06-22T14:05:02.129992Z","last_seen":"2026-10-09T06:15:13.686971Z","times_seen":3,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"k.top4top.io/p_2715dcchr1.png","fqdn":"k.top4top.io","domain":"top4top.io","tld":"io"},"ip":{"addr":"65.21.235.194","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.944Z","timestamp":1791526475944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"top4top.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 00:07:48 GMT","end":"Fri, 30 Oct 2026 00:07:47 GMT"},"fingerprint":{"sha1":"B7:CA:60:64:E6:22:6D:F0:0A:DF:8C:A2:64:16:9E:48:44:57:96:BF","sha256":"D0:72:41:45:3F:2A:86:58:79:60:62:32:F5:A1:FA:6A:93:13:B8:03:22:A1:CC:36:81:C0:54:25:E6:06:E1:1E"}}},"request":{"raw":"GET /p_2715dcchr1.png HTTP/1.1\r\nHost: k.top4top.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 207\r\nset-cookie: klj_40d147_downloads=ws3ta; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 10 Oct 2026 05:51:16 GMT\r\nlast-modified: Thu, 08 Jun 2023 06:33:15 GMT\r\ncontent-disposition: inline; filename=\"2715dcchr1.png\"\r\netag: \"6481762b-cf\"\r\nexpires: Fri, 09 Oct 2026 08:14:36 GMT\r\ncache-control: max-age=7200\r\nx-file-id: x55059022x\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"klj_40d147_downloads","value":"ws3ta","quoted":false,"path":"/","domain":".top4top.io","expires":"2026-10-10T05:51:16Z","raw_expires":"Sat, 10 Oct 2026 05:51:16 GMT","max_age":85000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"klj_40d147_downloads=ws3ta; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Sat, 10 Oct 2026 05:51:16 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":207,"size_decoded":699,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"11c3fa9657c0499e8131eb5b06f97c0d","sha1":"6cb9cbf33c38fffd77da2d0d97000a44f5ff421b","sha256":"fc0f03d69764509844c499e44a78980b03073d9d08d7c19a0eac3aa92eb2627c","sha512":"3948157d13e474aa6c67fb475be78bdf0c486578098e1bacfd9466c67e2c655bc64ae72604499592733dab5a61dccbc0c9cd66ad4db19d51f62e5c65717553a6","ssdeep":"","tlshash":"9fd022db26740ebfce7d2d2124408468896b2a998656a38442e76d603a2af742be2002","first_seen":"2023-05-01T10:25:59Z","last_seen":"2026-10-09T06:15:13.687859Z","times_seen":1448,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":15,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"k.top4top.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/imz/13.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.969Z","timestamp":1791526475969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /imz/13.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34347\r\ndate: Fri, 09 Oct 2026 06:14:36 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34347,"size_decoded":34634,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x773, components 3","md5":"5b71592644eaa1a603ec06ce0adc6142","sha1":"bdaf050472b13cf7d9d156a7eb8ae44bcfbe9f1d","sha256":"b7e2211c7e5f98f7fd29507ab33ae7f5c080e0c01f4047f8a00d7103415f258a","sha512":"25aea518c3c79b57d1bd06f49612f0a6dd13a921fd5a8e362a0d8cbf30f7c7c8d99e8ec22c5e49970ca5e227959f0c3b96ed33d285c4dece30ee76e334f09d78","ssdeep":"768:mtGM19oOMBAkMey30nISPOIxdHH4NnHl7hVdDvMcGyhqgsfDk2RA:lM1wCzeyXSXxdHEHlvdrxhqgiLA","tlshash":"bdf2e15d2bbd4f39d489fb3c0e6c77883c639c300d216e66f95a183552e029156bf62b","first_seen":"2026-10-09T06:13:54.093066Z","last_seen":"2026-10-09T06:15:13.6908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":958,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/MzAH8gp.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:42.522Z","timestamp":1791526482522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/MzAH8gp.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10010\r\ndate: Fri, 09 Oct 2026 06:14:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10010,"size_decoded":10297,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 222x222, components 3","md5":"f1567813134e75546e8e755aa4b75a0d","sha1":"de283e1ec7f313297ff00dbb957b450519a76e98","sha256":"e417fdd49855bcee3dedad514da951ec3330bc6544c0c6ee19bc470480e28ed8","sha512":"e4697863688b7cd9276eeb07f691cdb301c718f8810b7cff5c38a020b2764adad44000843d8700f1098af7bea3b7a0bd2bbce397f342ba3f9ab09fce7a9522b6","ssdeep":"192:hA4ASg5/lvIS/gMn0Qm5kh2OvPOkylLFalexcQn8YqjQ0lbW8Y:O4ASMlXn0QmzOX/QF726qjhFY","tlshash":"9922bf87915fcdbdff01a569ca86ede839002d350e426d7122036f0c17d4d748aaea22","first_seen":"2026-06-11T20:40:06.680832Z","last_seen":"2026-10-09T06:15:13.692879Z","times_seen":10,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/7DvlhUs.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:46.556Z","timestamp":1791526486556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/7DvlhUs.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7131\r\ndate: Fri, 09 Oct 2026 06:14:46 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7131,"size_decoded":7417,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 208x243, components 3","md5":"5d7324a079deb1adcf28efd3bc220c9b","sha1":"0ee7e5500a7a1bd5acc18b449da65eee440ab7ef","sha256":"bf284cdeb4b2ac71aa2d47eb194d48588ac85e4d3609e4de330546845e67d033","sha512":"e8d7b6680bf2f311167bb5bed4fa156abcb794a4c5250d43b12542755bd9eaa5a8c8253b97b1694ee7029691102b4285c9bc5e0e93a4b99f0b27d5a29244a4d6","ssdeep":"192:hQZlKp+7rECqpqZ+SmwdOxPfJfjxuA+pmV90BhmuErPEqTrY:er7HqpqtmwcxP9AmQBhpyEYk","tlshash":"f5e19d8ea23ba22ac3d73f3ed6780dca4c861c62c061d73744a300baac59df112c41b8","first_seen":"2026-06-22T14:05:02.136111Z","last_seen":"2026-10-09T06:15:13.693877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/zYFeavO.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:50.555Z","timestamp":1791526490555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/zYFeavO.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:50 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10625\r\ndate: Fri, 09 Oct 2026 06:14:50 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10625,"size_decoded":10912,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 201x251, components 3","md5":"b1802b2ada3793f423f0b8ae96312c34","sha1":"910d7bfad82a38b553ed8734d810109e231896a6","sha256":"2194df076680c63c626df4dc072944094eceaa2a07afdf82d73885efb559faf6","sha512":"9b7c15c81a5fdcd031e73bb7ba3f77d7efc50583116126f3b8d448cb9b28de2549fbe9fd361af5d5ca29619eaa3f28bce46a28f4736ea1ec16ff4731003ce339","ssdeep":"192:Z6+v+Fc8jBEbJuGgT77GcvrE6Nf4hnY5vmsaTklJbI+F0QwwxFmTnobq+:9v+F3IAjGGI+RTjs+FNw4FmUbh","tlshash":"6922af531d512ef6743a1226e4fedf0663eb858755528f1f88edf299c04a7d3381c225","first_seen":"2026-06-22T14:05:02.139683Z","last_seen":"2026-10-09T06:15:13.695342Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/LEhYAPp.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:58.647Z","timestamp":1791526498647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/LEhYAPp.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:58 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10975\r\ndate: Fri, 09 Oct 2026 06:14:58 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10975,"size_decoded":11262,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"1f7731ec54812e02308585a5c6af347a","sha1":"288abb0d11a8cf40ce4ae6b7327ea8450923cc84","sha256":"426bc31c8ffa4f7d87a41e4c73b5999addf5d03019711fb0155d2b97d3309b72","sha512":"0214fb3720c14f3f3be89d317cc5f24f000e8721ce20feaa3a1882a9e04093da12de97d98a662a3dd9536613640fb6f84255b86e32860ae3c5858b77ff98b06c","ssdeep":"192:d94rG4UcYK4vM/+7kWy6kpE+050AhvpZrWmOsggDfZbuuenuNmDaL0vxUS1P:d9RFvM/+4/pE+06AhRZrWmOs1hreuNDI","tlshash":"8632a0ce973e2ce0dee6a4e306a331d316059f9aa6857444f531d6657be10c8c06c1f8","first_seen":"2026-06-22T14:05:02.124559Z","last_seen":"2026-10-09T06:15:13.70009Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BX0PF8Z11Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.920Z","timestamp":1791526475920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-BX0PF8Z11Y HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 09 Oct 2026 06:14:35 GMT\r\nexpires: Fri, 09 Oct 2026 06:14:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 180216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":540603,"size_decoded":180820,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"cfc0c243b2f5530e9322c6dbfc81d172","sha1":"5aebab8e18b5c69804f7aec894946c4ac07d5efc","sha256":"85a061057d9fb87239572cb9a0eccf42beb7b1837850f7f3cb703891d8c09ee6","sha512":"9de64719cc6fcf81ba7be18cdf0ec9e03811a5979189e63841102910560b16b91a634870a570e48940f4183a4ac0a89c11a9aad0e2d601588e761d45fbab8f2b","ssdeep":"6144:rjsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:ZEKmWJmc/Wu","tlshash":"a6b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","first_seen":"2026-10-09T06:15:13.704919Z","last_seen":"2026-10-09T06:15:13.704919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":40,"receive":50,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/0vG2L1U.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:42.536Z","timestamp":1791526482536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/0vG2L1U.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9593\r\ndate: Fri, 09 Oct 2026 06:14:42 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9593,"size_decoded":9879,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"90cb4ef6800f8f2e18e12dd427edd504","sha1":"8816bb24975937da5fde309fec81b0b944e303d0","sha256":"868a3bd15917facd26b853d0a3993722cefd120c369ce1e8d94f6fa68d277e57","sha512":"f392465bbffd008c3d2cba491c9acdd195f0acbbe23bd995ea983eb4278acec2d782e719edfc89e20a7e8bae3b3f872889ac1832c3cd33b567a7525cea29f25f","ssdeep":"192:dNtXNFbpym9B4//GSsktqx3KNiCiFUhsBevjzvrFUMwPRN4tuFVABo9r3LsSndHK:d9xQAy3LnciipUhjzTFeRGeVABolsSnI","tlshash":"7e12aee1e67a1ed45a4821e52cd093c8c07a5e4b5aa155c71e232fd8f60e1d334b6fcd","first_seen":"2026-06-22T14:05:02.109755Z","last_seen":"2026-10-09T06:15:13.707683Z","times_seen":3,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/ET5pNzo.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:44.547Z","timestamp":1791526484547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/ET5pNzo.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:44 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5157\r\ndate: Fri, 09 Oct 2026 06:14:44 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5157,"size_decoded":5443,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"3dc8a2b65d0e2edf720510e2525b6759","sha1":"56a3a158778bf836fa9eeec090edb69c0a8ee75e","sha256":"2f62995ea3277f0cc768e20eb990944ecc1d667488aa16fde051b37222217c51","sha512":"534dab9b35b3a4bd889f3cdf11f72be1d9d4e30cbca9bf3bef17a13822f254bdb00d184c83d5bb500ff7284a2df09183af399774641b346a733bfcc67bc6854b","ssdeep":"96:dEOdLZgjr8JWrqwU9u/L0VazkAsPISi3BiSkIXgRKPAmuXOKSl4E8G1s:dHEI4Ow3/L0VazkAEpoBXkINZl4F","tlshash":"69b18d4f4a37a7049cce8cc158f7eafa917b09d128037a68aab076c076f49c4601d4b8","first_seen":"2026-06-22T14:05:02.122958Z","last_seen":"2026-10-09T06:15:13.711467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.931Z","timestamp":1791526475931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.25\r\nx-jsd-version-type: version\r\netag: W/\"1352e-ndvOPXKkWWyAnuLBXbzBkVLycnE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 09 Oct 2026 06:14:35 GMT\r\nage: 2394\r\nx-served-by: cache-fra-etou8220138-FRA, cache-bma-essb1270045-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79150,"size_decoded":22076,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48577)","md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-10-15T11:16:51.858507Z","times_seen":7915,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:35.933Z","timestamp":1791526475933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31017\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 08:23:22 GMT\r\nexpires: Sat, 02 Oct 2027 08:23:22 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 597073\r\nlast-modified: Wed, 10 Mar 2021 14:28:09 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":32001,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-10-15T11:36:02.255327Z","times_seen":510728,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":17,"receive":17,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.nijz.site/im/aaM8UGN.jpg","fqdn":"chat-whatsapp.nijz.site","domain":"nijz.site","tld":"site"},"ip":{"addr":"161.248.189.35","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.nijz.site/","date":"2026-10-09T06:14:40.533Z","timestamp":1791526480533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.chat-whatsapp.nijz.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:20:21 GMT","end":"Wed, 30 Dec 2026 13:20:20 GMT"},"fingerprint":{"sha1":"C8:38:56:5F:D7:DB:A0:42:1B:3F:3C:FC:90:52:F6:86:D0:20:58:3C","sha256":"28:B1:1F:65:B3:36:C6:FB:C8:D9:EE:99:F3:F0:3F:A4:DE:B6:A7:AF:46:3A:F1:8A:A1:E5:FF:80:D3:D9:07:FA"}}},"request":{"raw":"GET /im/aaM8UGN.jpg HTTP/1.1\r\nHost: chat-whatsapp.nijz.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat-whatsapp.nijz.site/\r\nCookie: _ga_BX0PF8Z11Y=GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0; _ga=GA1.1.1145038814.1791526476\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_BX0PF8Z11Y","value":"GS2.1.s1791526476$o1$g0$t1791526476$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1145038814.1791526476"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 16 Oct 2026 06:14:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 20:38:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6956\r\ndate: Fri, 09 Oct 2026 06:14:40 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6956,"size_decoded":7242,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 255x255, components 3","md5":"0978d974d7f32434826586247d0dc5e7","sha1":"2d57e45e76d8b9359aa39ac07b82a2a88c57d952","sha256":"bfe59054e888882fa24e49cdee6bdb71e83ce6da8db7e3fb724d8fcb653ecd55","sha512":"52afe554071763d223efc4e941eae5a9607ae2feb288bf050c06e33d4922efa1508d97f6cfc48930b08c1abb00e4f62f36d407b1331f67fb3f437c06326c2038","ssdeep":"192:dWqwCcTh1lMLAZ+ckbk1BG5seZoVezbX/brvTrEuoP+1uQn3:dWfdXM8dkbJhmVezbPbrvTrN83+3","tlshash":"1be1b0663707e040cda1ade74baa1c91f06cad84b490642c12f3b751f897ad4c59c384","first_seen":"2026-06-22T14:05:02.111838Z","last_seen":"2026-10-09T06:15:13.717485Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"chat-whatsapp.nijz.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}