{"report_id":"359c88d4-1abe-4316-9a7d-e6d44a6759b4","version":0,"status":"done","tags":[],"date":"2026-07-21T13:13:09Z","url":{"schema":"http","addr":"cn.whats-whatsap.com.cn","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"ip":{"addr":"168.222.65.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"cn.whats-whatsap.com.cn/","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"title":"WhatsApp Web - 免费在线聊天 | 电脑版网页版即时通讯","dom":{"size":49240,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2a5714aafd31df1ec49bf3873b907a8c","sha1":"ebde3695a726d97cd37cddc9466c02eddb036f90","sha256":"2b0f72ceb88ede59587f75c2680b91c74bb083c20dd73ae5fee38845aed6e449","sha512":"b4bea493e5c285536ecf66784df89d39be8616e627be8690a62cd7b4c9023991bb9446316fdbbdddd83b4bc98ac42c500e64b31a5480b4871f8f0a9d717f1d22","ssdeep":"1536:T72dJnoskY4oqqReTWKGYXFBs+qmyPMLlBVIIZ1qpw/WhoqtDeht/1DMt4Ppnm6:5z","tlshash":"c923936a95f32872241771a927fb47067a749007dc0adc393fad128c8fc6ba8795378d","dom_hash":"domhashea915eca58e1dbd6520bd3d09d25f396","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cn.whats-whatsap.com.cn","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"ip":{"addr":"168.222.65.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-25T13:13:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"cn.whats-whatsap.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"cn.whats-whatsap.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"web.whatsapp.com","ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2008-09-04","domain_rank":581,"first_seen":"2014-12-15T17:00:45Z","last_seen":"2026-07-15T22:02:11.704372Z","alert_count":0,"request_count":2,"received_data":10118,"sent_data":1090,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}]},{"fqdn":"cn.whats-whatsap.com.cn","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-07-20","domain_rank":0,"first_seen":"2026-07-21T13:13:09.768197Z","last_seen":"2026-07-21T13:13:09.768197Z","alert_count":4,"request_count":2,"received_data":49800,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cn.whats-whatsap.com.cn/","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d24e9304f3ff75d45fc6436e166ea312","sha1":"83935efe7f5a5bcc9f97bc188a2e29c7bd924497","sha256":"a544bb0672b1de0ee56dd5bad720f4e12dcdcc07465a9f04a615b181a85903bc","sha512":"4e4dff9a8c001d2d6b30a98dde5cb9f6bd075f56bd37f85b5c61533248127e40eb591e73ba1b1b2e270f779e197a9c6c1928eba8b403653155f1db10bbc83588","ssdeep":"48:bFh26QzclYFQ2d0KUBrYalHE2WuotEBY2YeQ+7qX7mc0G6xqBz/X26SL00tH2xrZ:549oS0KwoHtE5YeqLmQVe6SjWlZ","tlshash":"cd91bd2e50e23531447f31b96bdf629476312097b806ed117f6ccbc82f916a16cb6bca","size":4392,"data":"","first_seen":"2026-07-21T13:13:13.963333Z","last_seen":"2026-07-21T21:08:39.220757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"WhatsApp Web 指南页面已就绪 | 结构化数据已加载 | SEO优化完成","filename":"http://cn.whats-whatsap.com.cn/","line_number":1381,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"web.whatsapp.com/favicon.ico","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cn.whats-whatsap.com.cn/","date":"2026-07-21T13:12:44.976Z","timestamp":1784639564976,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cn.whats-whatsap.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ncontent-encoding: zstd\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-IQ2QmT4v' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src 'self' blob: data:;block-all-mixed-content;upgrade-insecure-requests;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown\u0026brsid=7664968567453641105\u0026cpp=C3\u0026cv=1043545460\u0026st=1784639565085\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/web.whatsapp.com\\/ajax\\/whatsapp_error_reports\\/?device_level=unknown\u0026brsid=7664968567453641105\u0026cpp=C3\u0026cv=1043545460\u0026st=1784639565085\"}]}\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: DiLBCzvU5jjGh8fwxOSlO9dcTffuOPAxwNu7VT/XflTNx6d0oJ9vBmnm4/xOesVX7mt1vbGAdQCvMgrtGTdo3w==\r\ncontent-length: 2608\r\nproxy-status: http_request_error; e_proxy=\"AcTJpbKHjnmo87SfnFT85oYTsWjZ2KoJ_i_oZ8E_EcJjOW6ihou5vlwt9CUyrSQHI6p5AHkiuGC7XWFzpP2r\"; e_fb_twtaskhandle=\"AcQ-A-fs-N1j-9aPrgakGi9sQyTIaVqEnc4f110xUCuGjSCLxKxSZYG6Yxp_mmGeiQpVkJflon4pHDV1h6ZtZpjfaplqd9pcHpEKrZiFWZqHVw\"; e_upip=\"AcRDpAh8kYAxW0aineG2v-hAAGcMpfGAzKS0AJPtlB-JwjJuRZXfgEUlc0_S7j-TVm2hmpqU_l_YvwMDylvyl92MBV5rfiMIfQ29lXNS8j0\"; e_fb_zone=\"AcRP5LhOPxkyh829JBJ7TZjyeqBxKQyCs2hikUfMQ59Sg10VushlErjqnFobbscg\"; e_clientaddr=\"AcSpuRT8RkPwqCHrrw3wHQSagANFxz1u569RTTRSW_uLcKKD9rUG3FSKjSUSeAUFEi3z0o_PZkcTiNIIOLj-v-Ji40_3S47ULHfq8Kg020UW23x--Q\"; e_fb_vipaddr=\"AcSp55o-i1p_5hhGDGPE8KgOs5NrkgBI5wP-IqiBaLHDYfbSWTFd0-6qP9yW05oixSFDggDAEDPMK9LvMTn9Q8FKeELatFsFkYIv\", http_request_error; e_proxy=\"AcTz-n8zXNqp_-S5-FVADivE20tc4JlJhN8GDJm_MQ_OE56R-8L9m5rUVli1tWPfSl1v3urrKA-9phAJ\"; e_fb_twtaskhandle=\"AcRbqxpKxLTbBCDbn3zD8KHeyQ_CuJgnI_vU3JHXsCBstUxgeUBtLqflwQiGfYHYgNUsu5bOmtyYx_9PmALGeCAzwieWk8LhW6Tq\"; e_upip=\"AcQ9t3JLuY1T38dhcqK8TKkQ3KyNjSykjpW2zfw3ni7rNjsg2-iL37NYML3JvMd20EMXU3GwboV2nqBJ1Bp2ePAiQ1LjYUCp8WBu\"; e_fb_zone=\"AcRWQQucIYNAiBCmAuE2z8kmCXTavpCuMWIwx0azft9YjSy_metGFb7G9nB5vA\"; e_clientaddr=\"AcSa0-IDvqrUZsBujFnF0aXQbuTOOjY371i3aKzSlnT2cxLEdfKICfXJ6a7LxnHVzTI24XFxhbqT9e-HdMY\"; e_fb_vipaddr=\"AcT3LujIRi4StlgocnpzIpU-NDWoc3_FidMOkow8bo-DXblw1Z9Dwyyv98z2Y0g5FJ_J1gE\"\r\ndate: Tue, 21 Jul 2026 13:12:45 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=4, c=18, mss=1368, tbw=4355, tp=-1, tpl=-1, uplat=133, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T03:24:33.01586Z","times_seen":17467192,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/favicon.ico","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cn.whats-whatsap.com.cn/","date":"2026-07-21T13:12:44.978Z","timestamp":1784639564978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Apr 2026 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:8A:18:09:5C:D8:A6:68:B4:7B:D5:D3:F1:3A:F9:DE:0F:38:8F:37","sha256":"F4:B3:AA:D4:E4:2A:DC:8D:B8:5B:09:25:B8:43:43:1C:BB:10:8F:92:64:C5:85:E6:9A:45:E1:BC:AC:AA:B9:FA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://cn.whats-whatsap.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 \r\ncontent-encoding: zstd\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-kn4FuFUR' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src 'self' blob: data:;block-all-mixed-content;upgrade-insecure-requests;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown\u0026brsid=7664968567496029121\u0026cpp=C3\u0026cv=1043545460\u0026st=1784639565292\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/web.whatsapp.com\\/ajax\\/whatsapp_error_reports\\/?device_level=unknown\u0026brsid=7664968567496029121\u0026cpp=C3\u0026cv=1043545460\u0026st=1784639565292\"}]}\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: f3/B9WkEQSSq+MuQAuXmZjwmXBz1ydGZWenPvieVkyAzfcps+KbqWSTjwt/htjUHjh/s2ceh+l2CMs9pvFKskA==\r\ncontent-length: 2608\r\nproxy-status: http_request_error; e_proxy=\"AcSFm-IICFOy2TlM1pc24p2sspnWeLqxjbFRgv6MbOvEx3eWgFAFOmqaOR2P29DTWEpzR793O1MNQx18ltpf\"; e_fb_twtaskhandle=\"AcTOoVAPJbcR8Yd7eAoLWnqx_V7LiwlNuXubKA1FoCIyZmBTbbii4P5pB33SGh04f9ipzVomsFz5K36zzFzzlAHkJmIfovM9xVby-AziZ2SjnIk\"; e_upip=\"AcTf2BZh2SdvtlHZX4TKqb66McvCkPiKLif1CXftWrcEzWN8lEoXkrv7FCFwQZbkX_HVuQs4CqUuZlx6WDroxpHtrV-YSyf61GZy9pwMcdU\"; e_fb_zone=\"AcQhhrkwZ8liMdQM6fX0rE8jBdyUmrcKPxugxi6qTpHcLmNJciaUH7y1PPBB0fLk\"; e_clientaddr=\"AcTJg_HpcS___AslQwumlm6uIQgobsKLDTvlSLrVuPgFLI_1ZFWEQNvLI7VVK4WHccSKhe-AeujR_vIfW4S5N3jFCOEbtm9Q988GNI4L-DTqTnY\"; e_fb_vipaddr=\"AcQd3XJZYKpKllrkP_MXJpUedt1qzdprXiRUyK6SoRpAUtam5sDq6m37mT86GBTabSaUBcMKBXf0uOYhetIK4uSFQumSt_35Wzko\", http_request_error; e_proxy=\"AcR3yqJJG2t5GuLMduFatzpzAEcYydtSK0lrbW52X3YCB7Gxy-fhbdySIgOR0S5bz1c2kAH0pqiMcFuT\"; e_fb_twtaskhandle=\"AcTTXSiTt9A38FxPn9-Xs6vLsAlHWfKsvByYMEYVEDY2qD3JeCWbkqunj6gcn_RrPgMNUtb4VM7zzAAbHTKI6vORy2yx-4vVpb7o\"; e_upip=\"AcSgZas6T8tIXFWZYiqj6JZA5RbHReGqtSFnfBd2lbk-eFvNnLocfDG5G3NAk5BL0RaZcskJ7_B2BzmVJ0rlaxEWo9XxVkxbcUYe\"; e_fb_zone=\"AcTWJYVuJAEU09gavr88t1k9V_ZAuBWrN5ZJt5JK3YtO2RygM81yGV_FnjG40Q\"; e_clientaddr=\"AcS_efhNLpZTLIqvvos3J2WuqmA4_PKAhJBMiJ365CgbzeY33dgmZ2up1yJwQTWuPv3uizsQKicEBbuzxxc\"; e_fb_vipaddr=\"AcS4G_RFu_cciJK8ihWbIBzVUZMQeH1hF1MGiN3Yl7GCNFJ_kfsKCaKOmpJBxKw0eEYD-rI\"\r\ndate: Tue, 21 Jul 2026 13:12:45 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=34, mss=1232, tbw=4978, tp=9, tpl=0, uplat=124, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T03:24:33.01586Z","times_seen":17467192,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cn.whats-whatsap.com.cn/","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T13:12:40.327Z","timestamp":1784639560327,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cn.whats-whatsap.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T03:24:33.01586Z","times_seen":17467192,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"cn.whats-whatsap.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"cn.whats-whatsap.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cn.whats-whatsap.com.cn/","fqdn":"cn.whats-whatsap.com.cn","domain":"whats-whatsap.com.cn","tld":"com.cn"},"ip":{"addr":"168.222.65.238","port":80,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-21T13:12:43.327Z","timestamp":1784639563327,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cn.whats-whatsap.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 21 Jul 2026 13:12:44 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 20 Jul 2026 12:25:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5e13c0-c151\"\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49489,"size_decoded":11127,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"ca9a24a0366afc3aa2772f70f18d49c8","sha1":"465baf86d712f25dae3b3184bf4e1bab2bf39446","sha256":"ba825bc3902dfb48f08ad86038f3bfa7de047431ca81b5df28cf69ceb37d8f20","sha512":"89b2f20facdd07fae12399be39229028229977c61a9ac7255f8eeb33bad576b7f9d5f4d2cece456e09baf67f0fa597ebc27b9c794e3b330f9795e5c0f3c0cb83","ssdeep":"1536:X72dxRnoskY4oqqReTWKGYXFBs+qmyPMLlBVIIZGqpw8nhoqtDeht/1DMt4Ppnmo:LS","tlshash":"e623936a95f32872241771a927fb47067a749007dc0adc393eed128c8fc6ba8795378d","first_seen":"2026-07-21T13:13:13.962187Z","last_seen":"2026-07-21T21:08:39.219165Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1484,"timings":{"blocked":-1,"dns":976,"connect":253,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-21","alert":"Phishing Block","trigger":"cn.whats-whatsap.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-21","alert":"Sinkholed","trigger":"cn.whats-whatsap.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}