{"report_id":"5d5ffdc1-3df0-41e3-a05c-eb00b98ba66c","version":6,"status":"done","tags":[],"date":"2023-12-04T04:37:03Z","url":{"schema":"http","addr":"dfvs.pages.dev/","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"dfvs.pages.dev/","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"title":"WhatsApp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:15:37Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"dfvs.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2023-10-22 05:53:31","last_seen":"2023-11-12 18:20:59","alert_count":11,"request_count":11,"received_data":900142,"sent_data":5096,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ecs.zongdiao3.cyou","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-08-27","domain_rank":0,"first_seen":"2023-08-29 04:23:54","last_seen":"2023-11-12 02:13:36","alert_count":0,"request_count":1,"received_data":0,"sent_data":595,"comment":"","tags":null,"fingerprints":null},{"fqdn":"web.whatsapp.com","ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2008-09-04","domain_rank":2039,"first_seen":"2014-12-15 18:00:45","last_seen":"2023-12-03 23:23:04","alert_count":0,"request_count":2,"received_data":4689,"sent_data":918,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dfvs.pages.dev/","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b1022fb2d7e7bc1a3f219f8f5c3e26b","sha1":"de515c094ba87313db37758cc4d7096d7a74a185","sha256":"a2ef5a938eb4d2373cf5d3eab1fef58fb800442e39a212de238a819fd7e64420","sha512":"3db96af046f9acb372b0685b4efcdf4594e9bf22f930259b8fc8be0df243745044e6d894301ceb919756d2062a5aa47b7b0dca9401013b215db09c09c02c6035","ssdeep":"","tlshash":"0b41ed26fbee7450a477353a576fa5043524ac132800ec153a6ce260efa895d583bfee","size":2221,"data":"","first_seen":"2023-10-20T15:52:19Z","last_seen":"2024-08-21T04:02:36.911575Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0c6e5f8f4bb07f38e7b15754ef84301","sha1":"1f34fd5d3539d33e49c7fea0499ce3faad4d4ccf","sha256":"4b79b6dc91a7ee33373b115991c3eb287ed710cfb6708421b4cab682eddbfcbd","sha512":"b4292626b141bdd94137a8df3205f5961fddfed7eeaf0181d48dbcf0c109dccea5c330681c1de56e5231caf16931d27c8efe7ca3d6ca03b3e614dc1cd925d8a6","ssdeep":"","tlshash":"9ee0223a77021b12a0b20c99354b6b9c263973a252686022f4ca9010eca9847c770efb","size":414,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.352819Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/libsignal-protocol-ee5b8ba.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ab914b33a56ffa80ca1de0819a70684","sha1":"0a103d668f19bd5529de831446389eabd85f3550","sha256":"b32cb4726155800367b1e44af2fd940b77aed84cc9baa11c0381bf35dd993c98","sha512":"25c7de99552202067965af9d381f732e1a7da5aadea450f20be3aba5561494686b9fb4a6538ede324d9e677b311adf3b7ca010c019e41e9d89ae092e9ccb44c8","ssdeep":"6144:BSK2TAQCs+IioRntDlrSP3/6SuNgb+qPSf:BSrTntD8nwgb+R","tlshash":"bf344b4ab253f9265383e4a5943f1c0af03a5859909c816cf64ccce3bcb9999d16bff4","size":249969,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.346187Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/runtime.88c356058afe3d58a508.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"46e475d8d5495b3ad954747f1898efe9","sha1":"c1672a101e0216f9cc585bc4ee4c0340a6cd8c77","sha256":"cd00a8ee12254d2285a82ea490590610a500c867831301e8d91884f93ca3c564","sha512":"608bbf016ccca172077afc23b07e40e8cf849747c1ba7bfcf96e4cd5be473dee3fef9a31a639fd84c0954fbc93228a91a235020a5b7124fdb05cf16fe6884ab3","ssdeep":"384:GwSCRRuhSPRKKyXWiHLTblSALWPPiPGke9kCPTHBfguJ+PAOV:GwSiuhSPRwGM3bld8qPDwjPTHBfguYPH","tlshash":"8562d6fc6e3f9a9b14a839c65e21a1789841e713290f0c91f1fbd9e10190fac71d1eb9","size":15647,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.347072Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/jquery.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f24f23b859cf718282e3806ed5ce38","sha1":"c92a61cb4fbc23adb05973638f60e2999bed4a26","sha256":"e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240","sha512":"84b7b499ab6fc2deb2a2539f011a7455a5220532b181d372489b4a04facdf0c17588051b746c184f92da77c4c972366b9d1390555292e5e54caabedc03f3495f","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFn:qGsKXlI2p0WPSbDrstfak","tlshash":"2893f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93099,"data":"","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-04-09T02:20:55.163996Z","times_seen":1470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/jquery.cookie.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c1792f2450cad33de3544df3b706bd","sha1":"6aedebeeb22958e76df928cd7d81a66883bbc0f1","sha256":"55c173330e36aaceaf268be4fe4421376a4e9eab4ce0de8e32aeb1c75f1181af","sha512":"58a2c5719a67071eb2b28e200dcacc0dd4e7e72357fed0525e425e8a7a06bfee528a36de5e9fdcb1597d3e7481c4f3a1e120ae183925105fd9808e9948b1bf1b","ssdeep":"","tlshash":"40611f6134fd223e0d9b6bd5276f0468b83ffe70b02406448426bd90286c862dba7c5f","size":3120,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2026-04-08T23:06:40.188276Z","times_seen":1260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/qrcode.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-04-09T04:30:38.983451Z","times_seen":54629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/video.png","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.554Z","timestamp":1701664611554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/video.png HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16259\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e8d82bc87223d31f958fe3a9e246895c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=x1mdOx6GLDgQSkanNh92Kd3xjcE9BWYbm8qnWMkNOUD1tpSPS3OMwZ1V0oG9QkaUxohD3Ts7tpPWyshjbhy6HHojErGZTsMGOOeH0gz46bDS8GhvRgQarw%2BSUZ3LT53WJw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abc8edb4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 315, 8-bit colormap, non-interlaced\\012- data","md5":"0c6ec69b054fdeb31cf3e5e10290fd8e","sha1":"5b2d2ef0e3b5824addcc34d642769f5f14671411","sha256":"d980ab372658f4c7c8f07d730ef6dc67e3fb3471f37928274f915c0308850994","sha512":"61947eefdefdc94654991e00de1045ca1e781b69fe1c7305614735926e256f007368f3e904207c8612e03d09e904e03b2a69a4cb297672a49952b2dda5459ca1","ssdeep":"384:SsAikOggeC536WiWxFu1WwOzEiraismFb:STik1gv16WnxFsWwdirVFb","tlshash":"4172d0e08a35ed8bd3a09455e1340aef76fcd0fd069e58d48c0b6aca251fa6c102b95f","first_seen":"2023-04-30T19:06:51Z","last_seen":"2026-02-27T16:52:59.593434Z","times_seen":851,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/qrcode.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.552Z","timestamp":1701664611552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /qrcode.min.js HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7ada293847f072170f0c5a32bd67bad3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Buyminh879SCGjwi60nWSF7Gb0IuWX1lVPN7eh8%2FVUia5hMm5o0S6yEozHiggdGGdWHwVJ9ZdlY6Wyw6YJKx2f3GZc0QvvZXY3SI9%2BJzZXlBUEWcUDYODkStYDhjpYPN3g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abc8ecb4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9643,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-04-09T04:30:38.983451Z","times_seen":54629,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/libsignal-protocol-ee5b8ba.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.556Z","timestamp":1701664611556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/libsignal-protocol-ee5b8ba.min.js HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"8a9ebdc63ef791fcc4d7fc80f12ae130\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=4cM4%2Fav5iKXM%2Fo0kaR3pLBFaEGV3bUiXdJxnS8Ej%2BFpCLkthdgdzHI6iTulazUbWsqvJuhPPiHy3jApXvjUBjfENy3WAMV2MSMCErCVMcWE%2Fsbgv4YC6ilqiKNlBQFWkRA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abc8eeb4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":91757,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8ab914b33a56ffa80ca1de0819a70684","sha1":"0a103d668f19bd5529de831446389eabd85f3550","sha256":"b32cb4726155800367b1e44af2fd940b77aed84cc9baa11c0381bf35dd993c98","sha512":"25c7de99552202067965af9d381f732e1a7da5aadea450f20be3aba5561494686b9fb4a6538ede324d9e677b311adf3b7ca010c019e41e9d89ae092e9ccb44c8","ssdeep":"6144:BSK2TAQCs+IioRntDlrSP3/6SuNgb+qPSf:BSrTntD8nwgb+R","tlshash":"bf344b4ab253f9265383e4a5943f1c0af03a5859909c816cf64ccce3bcb9999d16bff4","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.346187Z","times_seen":277,"resource_available":true,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/bootstrap_qr-e2b403f65ed52d327e90.css","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.542Z","timestamp":1701664611542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/bootstrap_qr-e2b403f65ed52d327e90.css HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"03e94140affd61cffcdc0cc2d7d64da0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VGbUtVnm%2B7%2Bi6xfbk1C7wzWE%2BTYeazmXNlBGwEGVGxqdT6T%2Bv2JX6cFSGnuI%2F1%2BL2xPF7G5DNtnDzGQE7hyaTkSb4QAd8JgNurerraWZzkhOGXMJQwshcawLnZki%2BZyjog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abb8e5b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176830,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/jquery.min.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.549Z","timestamp":1701664611549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0b037baf132504ce7005a11383470752\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ZXK54sk5yprtSaGHOIFQOwH0gvMUEWIwjPHVrLoS1KXMcvlr8kpPHFKu3ElQrMFff91w2eGfiNXezk5hM9y5rwyS3azJr06DgCCSUtbZ53DB9EQ6KLSno%2F%2BIE4jP0S9roQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abb8e8b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93099,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32072)","md5":"e3f24f23b859cf718282e3806ed5ce38","sha1":"c92a61cb4fbc23adb05973638f60e2999bed4a26","sha256":"e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240","sha512":"84b7b499ab6fc2deb2a2539f011a7455a5220532b181d372489b4a04facdf0c17588051b746c184f92da77c4c972366b9d1390555292e5e54caabedc03f3495f","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFn:qGsKXlI2p0WPSbDrstfak","tlshash":"2893f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-04-09T02:20:55.163996Z","times_seen":1470,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/runtime.88c356058afe3d58a508.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.563Z","timestamp":1701664611563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/runtime.88c356058afe3d58a508.js HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7430056c140c5b0c8d938cac5e9dfa97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iO%2BItCv1tE3ZZrfuzkOeT%2BzZtd9IQneFrXBbKBjjHLWo1roIjGJn7Y64AL7qCTI293qdgdmB3092g6nvGeaHUd9GOx58FwAySD38pFF%2FVrs1j6SF0gN8CjwrKGFozywHfw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abc8efb4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15647,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15564)","md5":"46e475d8d5495b3ad954747f1898efe9","sha1":"c1672a101e0216f9cc585bc4ee4c0340a6cd8c77","sha256":"cd00a8ee12254d2285a82ea490590610a500c867831301e8d91884f93ca3c564","sha512":"608bbf016ccca172077afc23b07e40e8cf849747c1ba7bfcf96e4cd5be473dee3fef9a31a639fd84c0954fbc93228a91a235020a5b7124fdb05cf16fe6884ab3","ssdeep":"384:GwSCRRuhSPRKKyXWiHLTblSALWPPiPGke9kCPTHBfguJ+PAOV:GwSiuhSPRwGM3bld8qPDwjPTHBfguYPH","tlshash":"8562d6fc6e3f9a9b14a839c65e21a1789841e713290f0c91f1fbd9e10190fac71d1eb9","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.347072Z","times_seen":244,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:52.483Z","timestamp":1701664612483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4 HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://dfvs.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:48 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1046450\r\naccess-control-allow-origin: *\r\netag: \"9a466ed71eb9a4f544eff9ea30abbe52\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Yg0zcqk8P9JBELrkXH31f5bbBQiKRcJDbSwOlsrQEw0RN9%2FxAjl8enGWuqJQOHhXINjUTcG5SccJMTOtYa5xLAhSREqbflNS78MzXKm5Aotnfk6tL6dYBz%2F2t4mjJAB%2ByQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159b1aba0b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":120093,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\\012- data","md5":"7c63a772d153447b0d1ca7feeb71c21e","sha1":"3ecf2b457b531bd96ab555a3326b862bd44c80c2","sha256":"24bcb3b3187006d93ed45b5fade6b859159984322bea9d34d5fade54240ed77c","sha512":"274f008257a1822521e319a47e3f1130554d8c8a03ecaa378e275bcf747142a7f73dfdf998f503d7c0aac66a013dfa8c3c83d56119491d6e997abadb86ccdd05","ssdeep":"1536:frm+jtr3/oAO1Y5nWYzGNdAFU/F03goyqt7pl35anQDFzgRzeOdZqmegXLU7nHGP:frJtD/K1Y5WYuh/yp5LJanQDFslea2xs","tlshash":"67c3d24af3329163ea21533d98e7c325b775c8b42353538b53a87638fd937a95ea20d0","first_seen":"2023-12-04T05:37:03Z","last_seen":"2023-12-04T05:37:03Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1040,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ecs.zongdiao3.cyou/socket/993kZcOQO4bRJJ0R8RoyZCT1wtNDWasI","fqdn":"ecs.zongdiao3.cyou","domain":"zongdiao3.cyou","tld":"cyou"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:53.244Z","timestamp":1701664613244,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /socket/993kZcOQO4bRJJ0R8RoyZCT1wtNDWasI HTTP/1.1\r\nHost: ecs.zongdiao3.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dfvs.pages.dev\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: XsWWeCGHcx64TtktYgN4nA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/apple-touch-icon.png","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:52.835Z","timestamp":1701664612835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 Sep 2023 00:00:00 GMT","end":"Mon, 11 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"DC:CD:62:0B:B0:45:06:9A:37:69:F2:D2:F7:36:42:7A:D6:E6:7B:50","sha256":"C4:05:B7:9A:02:58:11:72:C9:BF:8B:7F:B7:C6:3E:38:6B:8A:8D:BC:6B:61:5F:38:64:7C:3D:44:83:9F:E6:D1"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-encoding: br\r\nreporting-endpoints: \r\ncross-origin-opener-policy: unsafe-none\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: vHDrg1IH8ZNIL8fRq5dINZ8R3L2GADfWoUUb8r/3SVDaZegbvzaVBX8BTbEn/2e8boG6f8OxNbHtKLqcJ3Olyg==\r\ncontent-length: 2460\r\nproxy-status: http_request_error; e_clientaddr=\"AcJZpryGnyjIkKeMvn5MM9Ex0jycgIu27zNPZhx1c_xGAYsgtNs6TRl7YcLilSigLw417PMUVoCrIpd4okQ8N3ePYVmjwjJS-5qPyifyT-BAkfmUjQ\"; e_fb_vipport=\"AcLZz5A_De6HL6LpkV-m0pXSSuerDj4W5UlLHu56rb7Io1gcpIGlGlHBCmiz\"; e_upip=\"AcI5yplvT_8uff0-f9KMnijaYSeful49rLMKjds2FEN6D9NueL53zE3teUwh2-q4mkNcS49-PU_Ha9u7kvCvE08eg-HG8QTIYA\"; e_fb_hostheader=\"AcJw0uZq7OLS6Xu7PkDbd679N8JkF8BwMty6TFRVKxFE4Au_qHp4YygP7H-JIjP7cACDqcwn3olIug\"; e_fb_vipaddr=\"AcJhtYTfiR44hPokC4DuuZ_gR_kfuhWj0a1p_o-A2lyEVxqcu8t3AT-9sdWeR7ns9FPCebSjcAP6DchmYm_zv1FMHi7AOsmLwA\"; e_fb_requesthandler=\"AcKYM7eRQ17B_v2BoWOzI5P9AgYbCDa1SbIYdSb3mgQhqfc_jR_ik8s0wyZB1xPl_z950f_LKfw\"; e_fb_builduser=\"AcI8P-999_m-WyWEHxMJfNZr4cbVen8UZJLPmpUtb7L-qZ7Un8eFO4GJ8mDTtLk6oDw\"; e_fb_binaryversion=\"AcI5FJsRuaJyP7N7fFH8JJvCO65O8BlNJr3gMi18kv7Ap0yHr0aSJHfDehDxQBOyCeHDUPjLY8xYcQ9GuAHhTsOk-XvXSMRrnG8\"; e_proxy=\"AcKmdoWWlPiXHWAyT9OVBuDjhzsIOr3qm8naA3xEo6fuur_zURmOU6ewE2aGR4-UwZ-Wewdunh6zTAJmbAVY\", http_request_error; e_clientaddr=\"AcLDISTWNrEauiVskvACBOXifxmQBBD-kWzd4uElelc02wPYm5Dl7NDGM43ZvXRfggF-BnJHVGOd9W0T\"; e_fb_vipport=\"AcI3__M9DoZlrkziImokEUScCPZH-Fs-qMugrwdi2CL49lTPz04k1oIoBhlU\"; e_upip=\"AcIBjBbF26TDzC3i9tJTcTVtl2amFOTQoYPPECa2fXsiAc0rz9k53DaVTj5mvKRDuDwtn3TklVUONLD5splp3bUpF9ovzeHtIA\"; e_fb_hostheader=\"AcIyP3w8nyjOpC0nHmd9iJC1uzjP5cbnt66iG1O5pvpLhN0z9FzVGhS2gzNgfduzQYWMdok1rBqo7A\"; e_fb_vipaddr=\"AcJvQ4oPftr1B9J_UrTIegv8QE58R_s_LnuYe5RBHTBfKuRwzfDHjyqv5opQo6GxPtlZ6Cc\"; e_fb_requesthandler=\"AcIEIWURnPFBvbG_6HBDlE2awOcpF_S1Gsav983phf-fXr7yB6kpQg1qZS9AQGL5-djnJGsx\"; e_fb_builduser=\"AcJwyX81XGAs1NgbkTQ6O1khSGgO0R_8n7pvz9upM5sKl9NgFFU78a4nkbZtdVPkh8s\"; e_fb_binaryversion=\"AcJ89IOr8Jkw8qcs_4ZyU-ipvTSELM0lu67TpxI238TMl4KNlrr9iezHcZslCvsTZbLhzhS70weO39eTPhmjo3--Urrly62gASM\"; e_proxy=\"AcKtMpt7k9yh4PrM7ld0m27078XpPn04Mduq2dJGB4C2NYO-C6E2nat1G7OYxRFoCbkDDCG7tbh0tU8\"\r\ndate: Mon, 04 Dec 2023 04:36:47 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":12,"connect":8,"send":0,"wait":49,"receive":13,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/img/favicon_c5088e888c97ad440a61d247596f88e5.png","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:52.836Z","timestamp":1701664612836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 12 Sep 2023 00:00:00 GMT","end":"Mon, 11 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"DC:CD:62:0B:B0:45:06:9A:37:69:F2:D2:F7:36:42:7A:D6:E6:7B:50","sha256":"C4:05:B7:9A:02:58:11:72:C9:BF:8B:7F:B7:C6:3E:38:6B:8A:8D:BC:6B:61:5F:38:64:7C:3D:44:83:9F:E6:D1"}}},"request":{"raw":"GET /img/favicon_c5088e888c97ad440a61d247596f88e5.png HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-encoding: br\r\nreporting-endpoints: \r\ncross-origin-opener-policy: unsafe-none\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: D4+nYG4iqWIFkj2Ws8EWw1J3deQUhlP9JGOKi8fgBdIxxzldcOKZMsaORXB0XWBYUcW84se7BS01UFTtfnXaMw==\r\ncontent-length: 2460\r\nproxy-status: http_request_error; e_clientaddr=\"AcKURVgXbhDR_V4RXWjtLnvpuNctFTBwUiLBfiZh01eIBvcofuoLtSFjvTc37u-1toD9Ie3rXsyjiX5EKXByJPZfyrn8gWuZJttba2PVtkznkl2RmA\"; e_fb_vipport=\"AcIR092zkKlrLyFyuzrPw5pUNmiQcN0qRGqphxoHFBPt73CNSH69Eff_SCsk\"; e_upip=\"AcI40AUZvrxxLnaKtFwczeidTJYgrCodxmODY4QIhyYZ4dAzs5MX-k7zhmJFpN18ud_F1S6jCDlDcDNxz_8lMhg7j6dce42Zi4s\"; e_fb_hostheader=\"AcJOWUrTW_0ngokdKX6Edy8PxtJLIMFRDZeBaopBoi7gYoP73fBA6EKrg5cN4EPsUyxgn7a7hy1-uw\"; e_fb_vipaddr=\"AcI7VgAZ7d2Ao-yrpN1rxKZDTYgXXzcPpn6zsYvM5B2xbMKz7lwly1yWa-IV4DID4e_gPfiv-RdkaQYfrNwBQJCXBJ6clTef6w\"; e_fb_requesthandler=\"AcIuetSvskjK6cORpXhn7YR27J4rdnoKQrW3lgCmbK572mtYxkEAfqvEpmlIi4s5ga98I1Uh-hc\"; e_fb_builduser=\"AcJB0hWmzbzfflTfsokVMILadZgGWZyVFpoSCLh-zQc-MdStKTUc3rzvn9Mu9N-svtc\"; e_fb_binaryversion=\"AcLXGuZzvM-gyYPUbAusi7Av1r4C2_-n8K1bKgVY5-rEeEia9WCbOOrsqmrDayLC1UQeTSQSplEWu4wkxYUVoo2ZSqXF75NVvLg\"; e_proxy=\"AcKy4cyxEQqQHmZNPfwknsodSgHmw2d2oH5UKuSPiT0keyGXqMtWySSUDGAlbjmGkRJXvMZVDY0n-OWwbGvV\", http_request_error; e_clientaddr=\"AcJgSfUFZF0ieWxBK_8gzTZQEI0wWtxAi8qQtiqIWmymXP2g_Vd_G8S0aJ6D7Ux46Ufkcam-vibHs_05\"; e_fb_vipport=\"AcLAm0TRhKfi8zyD2ahYJwXl_KSJ6pEeO0jcJ3jbSByzn2pW_3qPasNOL6qF\"; e_upip=\"AcIz80BxTKd5oTXuK_hZdPhvMq0LBuQNd2Xp_hlYrMKcCCkKYYzJWXTiG6ughPstRzx8JdXw8De-TGYjT0Khm-NjQx1TXUdvBQ\"; e_fb_hostheader=\"AcIeEuTGEf0vGSjBUSYvJmIQTa3h4qsCO7k7w_6IsQLXPKRjKAZk7vuuJhIl8JUmjIsSUzho6Usvag\"; e_fb_vipaddr=\"AcI4m6tb4YYdNIGS6G4txivu0Ewy3kBLn1Tu-aq5NVDjpHkLYmjlFH_q7JfLNCxnadDzc-g\"; e_fb_requesthandler=\"AcJiIRFc_wuUL9XUY1-af2JAoJBsXUVm_hdSqzAGfGQmP6fapoY4zR7wvsxMV6RBLDoLej9e\"; e_fb_builduser=\"AcI5h4rN25n_qIjO-VsLqbQsKDFQrl3touIdWGkGFu37bMlOCd0MIWoDlYfd80uISvQ\"; e_fb_binaryversion=\"AcKPFIGElhXpFGQK_lwCZ7m53zHjpLZ6lTO4aH-f8PiR5FWmt6Evg0GzXgsMKCTn3Rj9Vb7aAp0-Pd1TfoXrouAkOiGxQQZxvAs\"; e_proxy=\"AcL-IZu2P-54vwscROQDAjOc-od7fedXM7_sI7hiVeeGDK2iaZZ0t_W8HsmNM4xY7G0BWOwxRQ1s8Jo\"\r\ndate: Mon, 04 Dec 2023 04:36:47 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":12,"connect":7,"send":0,"wait":49,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T04:36:50.937Z","timestamp":1701664610937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"aef97b8ad6deb8f097d1724fbc52a768\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0KNIoUmZYrJ08BXpi9fE9nfK1%2FUhwbZJwZypEs9UMaYFRkKPi6p8m%2FEJUpSxV7yO%2Fpfho1AlTdDjaAJqYeux2WKztsqP%2BWEXWsZVNbA6oXP3%2F8Cd7tahCa3IhyjiX7PhCQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159a81899b51b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18106,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":231,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/stylex-2d46744708947781f1f33a0069cbc308.css","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.539Z","timestamp":1701664611539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/stylex-2d46744708947781f1f33a0069cbc308.css HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"65cf534a072c0cdda7d1094f883a9072\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2BG2HIn%2B498GMylZ3s%2Fdyn3r%2FTix8uPwvsonYoUc8cUUhUW%2Fjwq2UuaVd0NgjIehMKcckIdE%2FYrK1QyJhBof3KmqN17eUhN02%2B0C1L1dfz7t%2Fysnohw2LGVkl2yC%2F7n1bxg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abb8e4b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116339,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (937)","md5":"ce08c431738ca6a8561b1c58a35b0b70","sha1":"46628f24522fd5f7891a61a3668cde2aaaa80dd6","sha256":"d3889a9a244c69018e4848bffa27b76845ca2c34813976342d4b122e6533bbca","sha512":"02b62a911dd8ac5575ed6813e9b98a009c8c270f35703eaaac5c3e67d40c72ec0d2821bebebc0c89d5969a5ed30987993424d2d4f896029f30adbef433cb4c89","ssdeep":"1536:Ud9iZpEir/tljYv4+tOUThVihbrrxVA/7V7YwcTzLulHFzxMZ9xJ5qAXOh:m4+llubfYJ1kOh","tlshash":"aab3fcf8626df13fbd2ac92799c47dd8a1082816aee219d3f85134bcaec1b9d1c1571c","first_seen":"2023-04-05T16:34:09Z","last_seen":"2025-12-18T19:38:44.539858Z","times_seen":774,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/WhatsApp_files/bootstrap_main.9d6050e3d2fff5b782d3.css","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.544Z","timestamp":1701664611544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /WhatsApp_files/bootstrap_main.9d6050e3d2fff5b782d3.css HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"f2144f69865583616f03de95fe1b8096\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ZpHWPTvHVXViEJxJ9fMyQXOz5bVKXNi5JuEup0B3prUP5%2B78%2FiqRKpsiuhZqydLgQ%2FV83OKOB2gdQMbpI7FQZ5tJ8hmu%2BrizP5hfwqVudmMT2HaIm%2F6Y8ZMFXDueXDsoDQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abb8e6b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":230953,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T04:38:20.882861Z","times_seen":13526337,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfvs.pages.dev/jquery.cookie.js","fqdn":"dfvs.pages.dev","domain":"dfvs.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dfvs.pages.dev/","date":"2023-12-04T04:36:51.551Z","timestamp":1701664611551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfvs.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 22 Oct 2023 02:52:07 GMT","end":"Sat, 20 Jan 2024 02:52:06 GMT"},"fingerprint":{"sha1":"DF:1D:AE:67:C2:FE:A7:FE:A5:57:8E:63:0F:6C:F6:EC:3A:24:1B:45","sha256":"87:03:E0:96:72:30:73:D0:EF:74:48:96:6E:8C:FE:35:A1:41:2C:5D:2B:42:E8:EC:49:4D:C4:C7:FA:A9:54:C1"}}},"request":{"raw":"GET /jquery.cookie.js HTTP/1.1\r\nHost: dfvs.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dfvs.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 04:36:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"ccdb2dc189ac698dd8a582a4291c7451\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=i4eDSvWLu8SwI4k6tTVHdymX018vbxg00atOuYN51wrNWiyNjGeEZU4C5IXh9mCZvwqCq0BPB27lP7vqO%2FYaqu6EwvRBVu5z5nB2pbPOszMhNMu9%2B6rbwMJoWSy1io7SRQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830159abb8e9b4eb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3120,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3439), with no line terminators","md5":"c776f7843da058a9030aea314d49613f","sha1":"b91ca11b466e153f05219e5e1a1e9f4348b2cc14","sha256":"573c67cf9289d24e8756d0f86d37652e7f2383233ad50dca47f2ae5382923735","sha512":"721cd85c9d7dd293136744217c41f11c5e297e4611ce95249d932c3364a33ab0048f1a5e4c8bb86552c1796d5c2a7142395ea0cf0a240278bc061a1f05bda249","ssdeep":"","tlshash":"1d610e6134fe623e0d9b6bd5676f0468b83ffe70b02406448426b995286c862dba7c5f","first_seen":"2023-04-07T19:39:00Z","last_seen":"2025-04-01T12:45:38.118997Z","times_seen":678,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-12","alert":"WhatsApp","trigger":"dfvs.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}],"urlquery":null}}]}