{"report_id":"3ac8cea4-f5fe-4556-9ab8-86977e5a688f","version":0,"status":"done","tags":[],"date":"2026-08-16T02:46:00Z","url":{"schema":"http","addr":"zh.wsp-whatapp.hl.cn/index.html","fqdn":"zh.wsp-whatapp.hl.cn","domain":"wsp-whatapp.hl.cn","tld":"hl.cn"},"ip":{"addr":"168.222.65.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zh.wsp-whatapp.hl.cn/index.html","fqdn":"zh.wsp-whatapp.hl.cn","domain":"wsp-whatapp.hl.cn","tld":"hl.cn"},"title":"WhatsApp Web - 免费即时通讯工具 | 官方下载","dom":{"size":35967,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"04645f7acab1551ff8b6d91fa93b8659","sha1":"05354261d3f1e91504436ed025f543938d1ea306","sha256":"d2ea7f87d07bf99b5c2dc704e3ff2311a259a6afd16942e3f22aa8f413132cfb","sha512":"0bd7008c8b2b3b334237516a252b0f78ae801aa90889d8fd14a3674915075464506b2e4759966141462592a9081007899d4ed45028c85adf059a3916393d782b","ssdeep":"768:TbtqzGZeFnJGGHJOOXAaA+4Cyu+ekG93sjJYr:TbtqzGZe3GGHJOOQaA+4Cyu+ekG93sje","tlshash":"bff2c39b96f314126403a0b86bfb574a7a21c007c50ecd693fac534cdfc6ba56963b8d","dom_hash":"domhash2f36ec5bd69b8517690f7298b3f22bb1","first_seen":"2026-07-25T12:22:00.467861Z","last_seen":"2026-08-16T02:46:00.782292Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zh.wsp-whatapp.hl.cn/index.html","fqdn":"zh.wsp-whatapp.hl.cn","domain":"wsp-whatapp.hl.cn","tld":"hl.cn"},"ip":{"addr":"168.222.65.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T02:46:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"zh.wsp-whatapp.hl.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zh.wsp-whatapp.hl.cn","ip":{"addr":"168.222.65.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-07-21","domain_rank":0,"first_seen":"2026-07-25T12:21:56.180185Z","last_seen":"2026-08-16T02:39:38.840303Z","alert_count":4,"request_count":1,"received_data":36532,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"web.whatsapp.com","ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2008-09-04","domain_rank":581,"first_seen":"2014-12-15T17:00:45Z","last_seen":"2026-08-09T09:11:30.130879Z","alert_count":0,"request_count":2,"received_data":10129,"sent_data":1089,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zh.wsp-whatapp.hl.cn/index.html","fqdn":"zh.wsp-whatapp.hl.cn","domain":"wsp-whatapp.hl.cn","tld":"hl.cn"},"ip":{"addr":"168.222.65.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6aebfd5d662babca2166ca5274d00d2","sha1":"0a0f885277602905de997b5ec9015a1b8336cafd","sha256":"f4311dec4b4a42c6585bcaac244e029849f63dbc9ed49fc1ed6aa578ed7774f0","sha512":"53b3a0d5035171df2595a8235a1dee2ec0fae110c0f720943dd2ff102049ff1728718d0c5fddae8aa0d26bcad6311a76b4cf3fd42c837b9ffe3c22ac65433d16","ssdeep":"48:ll98aYtEB+1SHj2d9AhFah0nij5wJtlr0d5MXmryciycRhSF2j6:XYtEASHeekhrGJtFUMUyciysoS6","tlshash":"b991be6f51f2207284b773bb579f97a4b12210873807de067f1e8b440f9196528b7ed9","size":4515,"data":"","first_seen":"2026-07-25T12:22:00.471143Z","last_seen":"2026-08-16T02:46:00.790719Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zh.wsp-whatapp.hl.cn/index.html","fqdn":"zh.wsp-whatapp.hl.cn","domain":"wsp-whatapp.hl.cn","tld":"hl.cn"},"ip":{"addr":"168.222.65.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T02:45:31.789Z","timestamp":1786848331789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zh.wsp-whatapp.hl.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 04:35:25 GMT","end":"Mon, 19 Oct 2026 04:35:24 GMT"},"fingerprint":{"sha1":"3C:44:AF:43:C1:ED:B5:D9:46:6A:83:25:F3:E2:24:E4:3A:EB:AA:55","sha256":"93:C5:7D:3E:F2:39:93:82:C4:8F:3A:7F:54:99:FA:AC:6A:6B:DB:E4:1D:5B:FE:A9:1C:A8:D8:6E:5E:29:C9:12"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: zh.wsp-whatapp.hl.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 02:45:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Jul 2026 05:31:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5f0424-8da1\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36257,"size_decoded":8092,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"f2356cd3b899dedb352809ba2fa9203f","sha1":"49a991ea6ca5694dc53dacc79079e44bcd97f8c9","sha256":"ebd92808344024426ea059bf5374dd5f8f3571cd438bc06dbb34d3c99c193e10","sha512":"a108d516fe09ddae4cf470ee0f3d8e2c2d7f16bbeb8ce79cc0ffc8e19c3f5fbad61c66383b5c9d5c02bb617db5efffa9e27e071ef71eb9f0eb1b664a39e4dc46","ssdeep":"768:XbtqnZeFnJGGHJOOQAaA+bCyudekG93TqJY5:XbtqnZe3GGHJOONaA+bCyudekG93TqJC","tlshash":"a1f2c39b96f314126403a0b86bfb574a7a21c007c50ecd693eac534cdfc6ba56963b8d","first_seen":"2026-07-25T12:22:00.470078Z","last_seen":"2026-08-16T02:46:00.786725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":665,"connect":207,"send":0,"wait":208,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"zh.wsp-whatapp.hl.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-16","alert":"Phishing Block","trigger":"zh.wsp-whatapp.hl.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/favicon.ico","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zh.wsp-whatapp.hl.cn/index.html","date":"2026-08-16T02:45:33.510Z","timestamp":1786848333510,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zh.wsp-whatapp.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 \r\ncontent-encoding: zstd\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-CamoU8vV' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src 'self' blob: data:;block-all-mixed-content;upgrade-insecure-requests;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown\u0026brsid=7674455153288181426\u0026cpp=C3\u0026cv=1045297628\u0026st=1786848333572\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/web.whatsapp.com\\/ajax\\/whatsapp_error_reports\\/?device_level=unknown\u0026brsid=7674455153288181426\u0026cpp=C3\u0026cv=1045297628\u0026st=1786848333572\"}]}\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: RyBN+rlj5EDE+sTyS0TTPHVx/1X/RcNFvlvijHeS3rQnj/3+r4lriCemf0QvMUQpZYcZyZDCcJtuLnFoKUCHiA==\r\ncontent-length: 2606\r\nproxy-status: http_request_error; e_proxy=\"AcRPwep5qq1_k06adlHPSl5zc47OAYV2SZyOb41h7R_TAC0oGK3X2Aj5NP1KYapD42h42RkLfyedhuRKiAgA\"; e_fb_twtaskhandle=\"AcRkokjAjrq_QJfNHvnW2uP7NteOrJkE30FNzJIECpd7Kc2DuoHavrLEzhUQAh8bPW8M2-BjKNkVNOQbWpHatu4VVIjPxFVBjRjmIEFGlbIi1dQ\"; e_upip=\"AcS3hpGn4_gmgSctD7OGiyOsNxxkeD2Y46-u5PaIUIyK_aVShFr8X3kYymodrBY3tovLZL7EW02CbkPfhl3wWKdrvPDbXYhZ2qi4cu19At0\"; e_fb_zone=\"AcReBHGE8smQ8qOxM0TglXi-TUVDGwobdhad5t2digCMvlgm7WDm_AoOhkXKplbe\"; e_clientaddr=\"AcT_sXsu4MsJ1JB0E1bJuC_bmX9FaHy3bmHqZJ1yHOwAUtLPYKJs_IWXmen_eYmEKhjjDGUUKSkjF6NGEtaWGOODGlo_hlc3AUTXtT3z56kuUsJjjw\"; e_fb_vipaddr=\"AcT_KbtZMLrrTXlcgAe9LLHMb0p0aBQ4uP4bBrEkqjbWnhBnQvG8XNBgysh44xJMs_1D34AonBZKwExsQJna3i5sN0JEzJwp4mOIRA\", http_request_error; e_proxy=\"AcTA5dBitfoenICwBEAunZO-LNLkW8PEFMGY-wAEvn8JH8BZbtncHBFhlo4O73Wn5wvmSM4NI7xsr_kT\"; e_fb_twtaskhandle=\"AcSk-3MUeIcNdIaR58R3-l5vxkatxIFqll0tRfCi6Vu9VAZ569br-tm5X2V1CDnf6eU1t9_s2Ikg0TDpGhQC1WM_xMLOXL_R3PmI\"; e_upip=\"AcTPHu3CUorcT6O1ddutYWl-_sNQ_01fFnCzCRVwig58szcXELcnKGPSiDJcAIV7hRnTskhUr1dF2Ob5oFf_sj3X6Ydz5Ct7jVszdA\"; e_fb_zone=\"AcTr_k0qFFLeVJXuWWap2sIEZFK5z6JGM6JXz5f9sp_2AJbiC_Pu2ZTEFmoA6w\"; e_clientaddr=\"AcTyHrzF1D-uG2I0HoUOs4ogDWjp9DDoNEHRKemXvAChJJRstllwdHERScgHGFN4mpvlh7mGSuJEKMUAaN4\"; e_fb_vipaddr=\"AcSWbB-GKdL2ikckY68BTY7S-IZf79e2KM3l40ymcJFZoh3TjllGuP368qBQ4G8lSvHeHEU\"\r\ndate: Sun, 16 Aug 2026 02:45:33 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=15, rtx=4, c=17, mss=1368, tbw=4338, tp=-1, tpl=-1, uplat=54, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/favicon.ico","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zh.wsp-whatapp.hl.cn/index.html","date":"2026-08-16T02:45:33.633Z","timestamp":1786848333633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 25 May 2026 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5C:E6:EF:64:C3:60:12:2F:8D:31:43:6B:7B:F7:A6:C6:95:43:62:5F","sha256":"39:FB:E3:F6:9A:26:91:AF:FE:E3:BF:C3:A6:E7:4E:D3:E8:06:3D:5A:2B:46:79:E6:0C:A3:5E:D4:76:91:89:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zh.wsp-whatapp.hl.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 \r\ncontent-encoding: zstd\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ncontent-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-Ca2XSpzt' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src 'self' blob: data:;block-all-mixed-content;upgrade-insecure-requests;\r\ndocument-policy: include-js-call-stacks-in-crash-reports\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", default=\"https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown\u0026brsid=7674455153493354932\u0026cpp=C3\u0026cv=1045297628\u0026st=1786848333665\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":259200,\"endpoints\":[{\"url\":\"https:\\/\\/web.whatsapp.com\\/ajax\\/whatsapp_error_reports\\/?device_level=unknown\u0026brsid=7674455153493354932\u0026cpp=C3\u0026cv=1045297628\u0026st=1786848333665\"}]}\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: cF8InvVbewWfrN84Tm40gN0ml4pPKygB+O/IbbzryXQOolAlxw/5CC3Lu7r/TuwjSxktya3DS6qo8v20SKPKgA==\r\ncontent-length: 2608\r\nproxy-status: http_request_error; e_proxy=\"AcQYVtf6bEhYv8bizkI_E9zMJU1XFQOjBX8DpnHZ0d7aW47T2BX2rmXDBNaL1zPEwkgodL9r04uskQiDIkAZ\"; e_fb_twtaskhandle=\"AcQ5zATA_0fXmO43YsJIqdIDnI-mn1TQjybSZ_4HdnojHgOd7Jq43XZMMPiybyXk1qpXbL5e2gHpehycbRTGoqLYPcKRUhzYl3oOZfvkmpbfLoU\"; e_upip=\"AcQndlTIM6h5lQKw1vecGDLgtIfr-eHV1XLFsowMiLVRmB61_iwSu-cZSyRVKumkQ88lpoZPT4QTJr6x9GfBW8PFxWHlhpidGvWA6DCYbrk\"; e_fb_zone=\"AcQ57v-zRhGxR2o5mlSmMgiC2J-pnSun15KzvadouDQd0jA-XAPJl56xV70xX3en\"; e_clientaddr=\"AcTvhKV58puY0e4g7ssf8a87tdH7n9Kg9mNqiiHx8j4PL368aQzw2yGY9Q0UznK1OlzBGR0cWASI9Mf_4v2WZfhkNGMRC4HghGm4Y1th337Z1p_HXQ\"; e_fb_vipaddr=\"AcSlzXdrEyHYy6VnQrywp-BNoAi6WUDKAFMXvAzkvt8yrhGiHIuPMSF1Ez7QWU9bzcQvSt68Kqbwft_ZyWD3FQNAV1u68wHe27T1IQ\", http_request_error; e_proxy=\"AcTB8IoZ1EUaoXwS5fUfxocgU_SxuXg5BFcgIh6kyY7tRriFsOj0A70TQWwm_m6m9lor6wHmufYPi7La\"; e_fb_twtaskhandle=\"AcQgP2ejUL-gCXKDQKqE_dltt-P3guXPCXD-3gQFP0B-t1z-JWkDotvqZyrFbh6HGDrhKV17CGf9ZsSZ6dxIsyfc-cis2wCk6SSs\"; e_upip=\"AcTVbSgqaXcV8ca1X-YkSdj29j0KlwDz4SUYIArujl1gjsUL-IjTUwMlKL5-CcDJpV3mz3kK06iIezemxZZGhXMgbmmEVG3U81mYEw\"; e_fb_zone=\"AcQGDzQTaURny5_7LtkHmP8voTkNSPN6xUNq0xM2yAC0i6ZUGZBwTx2qb9XZxQ\"; e_clientaddr=\"AcTSCYCMNt85CMaYdaHlsnYnEYBiVD6m0Fd0MTofDl_9nLWrqkpgK9nmRBvMhTELqu8GHxkwNyfjJq7kn70\"; e_fb_vipaddr=\"AcRqigHvzmbIMY168UGwf-Tuvd1oCb2PCgxJ-5kFnzLxF8gJE5NqnFTCxXfSP9k90JehtLI\"\r\ndate: Sun, 16 Aug 2026 02:45:33 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=12, rtx=0, c=33, mss=1232, tbw=4964, tp=9, tpl=0, uplat=58, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T21:44:58.984349Z","times_seen":17979311,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}