{"report_id":"8067e9ea-e109-4ea9-b69b-5c3101d7cf62","version":6,"status":"done","tags":[],"date":"2026-01-03T16:16:06Z","url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"172.67.170.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"title":"Whir - Bitcoin Mixer | Anonymous BTC Mixing Service","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T01:00:56.500297Z","times_seen":17734268,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"172.67.170.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T16:16:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"whir.ac","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":25,"received_data":528875,"sent_data":11608,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-28T22:19:30.36119Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94e8d306512b4e0b1cb417b8762fa59c","sha1":"f8db41b07d807641ef7534be45f9df27fdccc982","sha256":"6862e61d4649bf087f17151678af0bb319197825aee6e51e20b5562d9db0c8cb","sha512":"7f6fd105773d19a9ee665bf5b98f27442ec6c4a7b4c686b5f4b242c41a3d45a26cc10aa2c1177e6ea7d504efa695a142f6335771269507eb99cf7a2c7ca107aa","ssdeep":"","tlshash":"fd9004003f10c750117705450c70c044150401f5c14cc1dd11d3154557c43cffc13175","size":49,"data":"","first_seen":"2025-09-03T16:18:02.987395Z","last_seen":"2026-06-04T15:29:17.647198Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e10b45562b2cbc1d7f932e3df9d0805","sha1":"2ca9083b3263514d0f3d91c61fa7489da690b4cf","sha256":"50b6de3ba655e1eb5ad71add6606137491ddacbfb59f71158da096e6c43da3eb","sha512":"6619bc09d74e2b4d44f4a7c65f4b4fc419480c7d0049dd6bf6d7ab5e42519382484da4a3b4907006b4d5a596828061413918e9991d087a262f6b72fd92007557","ssdeep":"","tlshash":"f821dd49b09b38b08673316f2ffba10256f9424b841de504795c96013fe136ee96aecb","size":1346,"data":"","first_seen":"2026-01-03T16:16:11.435467Z","last_seen":"2026-02-03T08:28:53.236101Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/js/scripts.mina9ab.js?t=1692681794","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d1cda2a69b6648b6f58ab8a9cbdea3d","sha1":"a1d4270392af16b14f2d660a44458695fc179579","sha256":"dfe7973aaafa16c656efb7f11f57132f84c2bc6f3629a005ac1e88f2731d4d24","sha512":"0c1a63a33ac30ec4e9cb39d73ed1dec055387c449ee65cfde5ba17ee01bb6cd2c9aeeddd683a4795101fac4e9bb4ca90ada9c34913b5dce800e5bce5b8502fc7","ssdeep":"384:WoXMMhJtx0AOvHXKjKEPRnCjB1JWKbZZ3tpn:Wo84Jtx0VXKpPRn2x","tlshash":"8282e959b3203a6f52fb63f3306bde05a3f219a7960e8154d13e90765e70442ba1bf1e","size":18776,"data":"","first_seen":"2025-09-03T16:18:02.965957Z","last_seen":"2026-08-02T02:28:56.078633Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/packages/jquery/jquery-3.6.0.minc5c5.js?t=1652093265","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-06T01:01:36.941617Z","times_seen":496465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73fd3215d68e77c30e89a61ae3facd76","sha1":"91e04d94d3ff8bf7537cf23c8fef0f148eba3890","sha256":"4679e7862e7d746c7aa6440eecc38b5e8fc9648be3ffe1639d9259d085fb17b7","sha512":"7e9aa112ac3730b54751af56575c1180c280a90e649488c3226268163f1c1312e20278d2e8530c7c83cb4194ac6cf1a44d090d7bac4ec60c73eb2c2385ec0e58","ssdeep":"","tlshash":"0a21be4db09b39b04777296f2ffb610596f8424b400cd504795c91013fe53aeea6aecb","size":1353,"data":"","first_seen":"2026-01-03T16:16:11.444474Z","last_seen":"2026-02-03T08:28:53.236615Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whir.ac/assets/web/images/content-3-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/content-3-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 272\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"110-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XeGo%2B2nS907eGeeqBYB%2FLdAjx7PZvKTGTCVbtTtxQMTQHxAShAPdk%2FrWkl9731ixjqqRHK4LGruv%2FI1okmXTukolwy2R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cc1b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 15, 8-bit/color RGB, non-interlaced","md5":"7868e17625e1aa34b5c642e4e68a6168","sha1":"b8143600413f6bf77f0a22a54712b8e365856dc9","sha256":"196b74af1f1febc7dcf8e0be6f691b6cd29993afdc111fa573f59399cc9ad206","sha512":"7b371f1cbfa81f92a0db605ce5635986d115d1e20bc8832db19d708d54d803443c568089e917f868b37028d1e09c057ab8e41ebff1b072c5f781f08ae9078b3d","ssdeep":"","tlshash":"52d02bea20827d75c6654677df942473f4201221c330474c148b253a76d92a9e5d928a","first_seen":"2025-09-03T16:18:02.97204Z","last_seen":"2026-07-13T01:51:04.372865Z","times_seen":19,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-4-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-4-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 503\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"1f7-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrqLFAdVbhuazua1afUa0E8bm%2FvPMhrtwkJaBzlqfCxMR5dPXzCl85xSBgQ7EdnQmkyAjiwFhM1Mvk%2BxPVEM6C%2ByjHDn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3ccdb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"823b29c301a866c27b6af56d2599ee56","sha1":"05f2147bcbc7e2eb6d72c6282b69e6db6a349d38","sha256":"8e2c381eb3714d02b7bf1b57851cac824f854e321b79cba719aac713f061448d","sha512":"2885ca70bb98024b0892ae869c224650f33d8d7da9833c778ee60332c48acc41d77b6c56901ab3dd1dbccc4d811b361ba5fbece260019b50e1fa5ecc845f4976","ssdeep":"","tlshash":"ecf0055777a01925c26d4432d677e3fc6911300206d121ddc4d15dd43fe97be54b4c4d","first_seen":"2025-09-03T16:18:02.977962Z","last_seen":"2026-07-12T04:05:48.943328Z","times_seen":12,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://whir.ac\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b83cbef584f0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":15,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/decor-2.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/decor-2.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/assets/web/css/styles.min3769.css?t=1716901816\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 6410\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-190a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As2CTonR2mOrVZOjHWBSGIpHQMjqnmtmurUJPrqOnMFZde2bO0nxm4m61U8LaI71dFMf0zqINDOpyy0dWh29%2FpAfpdQ%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf06dffb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":6410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 360, 8-bit/color RGBA, non-interlaced","md5":"85a1debf3c4ca7e71046641794f60140","sha1":"0551e0f01d169e14c1aaf3669cb4632026198ec2","sha256":"75b9f3230a86506f100f6531bfd9010e27cc47757d168722ad5b53f67909b7dc","sha512":"9f19763f69ce92e3dc14c2543611107ec2a3e6d80becc10ee16e6fcd570d352bbfd1c769e7836b18322d8c9b59c25e2e829f7f2409fda5047030b953b0267b1b","ssdeep":"192:BohMwwiWKUPZBZ3ehPVReJtB1yUJmpoyxjxDST161Y:BohluKQv3ehPqtBEpoyxjxD416i","tlshash":"77d16e7a2a31eba05edfcd7470858f37d5eb89790be19b09cb77704d3447d029650828","first_seen":"2025-09-03T16:18:02.968781Z","last_seen":"2026-07-13T01:51:04.373713Z","times_seen":19,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/fonts/jetbrains-mono/JetBrainsMono-Bold.woff2","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-Bold.woff2 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/assets/web/css/styles.min3769.css?t=1716901816\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71180\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-1160c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h9EU3v6d4eLeWApCmI2GN8tCdPbeAe79E5E56oVnA7ggxzT38qtNlUU5vppWC9RVjImu8UtQ6igvo%2B%2BSYtI8Blm49FH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf09e44b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71180, version 2.15860","md5":"846172004976073c0aff81d4eac924de","sha1":"cd5145a1050492ef6fec4ab31d077cc0b8b90241","sha256":"df3f86c04988d8f7fc516db3e95ec6b630cdc67bec91fe4297c6f8e132be1037","sha512":"3d738467133fbff65dde797180bcd29e44eb960f9194a844421022150c9b675c3b4e1529c621c5b7dec4a8c6431b98b80feb20f58d818bcd4e07aba44865f9c6","ssdeep":"1536:vvf2K6Bu/iNDv8r1t9GMW4mTPMqvRi378bP:vvf2K6Fur1CVTEqJq7Q","tlshash":"596302c9d19517c6dedb1b4cb03f2f262152b610b2843fe672ad37d4dc2a9a150ac9ca","first_seen":"2023-05-17T09:13:21Z","last_seen":"2026-08-02T02:28:56.066268Z","times_seen":44,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/fonts/jetbrains-mono/JetBrainsMono-Medium.woff2","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-Medium.woff2 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/assets/web/css/styles.min3769.css?t=1716901816\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 70480\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-11350\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCRyiYqqCpjbnYgoWn7Sksd7LpU6nsRUqIPiGNxk0QuDRG7mSxMvmWVyAK8KOtBseJgWYkT7DxP89UwXbprJumsl19Mi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf0ae4eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70480, version 2.15860","md5":"b3d288697e572f369f96c9ffef4e688e","sha1":"a3961e1169800e4abd32a6866203091843c89006","sha256":"2a49a1e6536afc38297fcd75e3f076eb85944c063f789693ff0e38630d07d480","sha512":"ca43006a7fa89058c502ddfbc76c65716be3d0bfb1e4d10c5d13db0c986e6479a7c9471b30b712e53a03759040367880dec2e6441db03ae7fb1bfdf2ab881248","ssdeep":"1536:GzJWzbfazqvM5N6Jqj7FP9KgzX1vUsVjHV0z2z2G:GFoazqvD4t5zlvUM0K2G","tlshash":"be6302ef41616f86b577e7a9e1b8550a09bd5a0b11237194c0853d43eb318f01bf8f97","first_seen":"2023-05-17T09:13:21Z","last_seen":"2026-08-02T02:28:56.075839Z","times_seen":42,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/content-1.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/content-1.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 33601\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-8341\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2Fu8TGM6fUzsqbc%2BuWTDDCyxHeJm%2FCVPvseB4nJ8ngWUnPJ3%2BOEma1L6I74DqoZxzQlF8vAVM8HHQ7K6lgKjeyW5f0rj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cbfb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 724 x 349, 8-bit/color RGBA, non-interlaced","md5":"8545414030d51f22fb689cf9454724ed","sha1":"795e34379a76ce1ae09a9aa0a6a4d2b891ab5ee6","sha256":"e8e6c87fbb64d0bcbe8867526b1c924d45cc33b7cdfda3ffd97481740b3d5041","sha512":"561d7ffeb426f91ebcf6155ee6b16a694c9b029091f7f67b0ebf3f5c6c38699ab61875aeb7f42b7b966a6fbceb32d7c837b391632371f6f5f1ddec7702a86325","ssdeep":"768:i3vs9qbfFwSgvevYtWw4boi4SmY4ttvt/aiiLTB0/q:i3vshvvewtni4S4fvsqy","tlshash":"d9e2d0935d73da980c8300f124fe5f639f7b548a69c0bed1e318fb1e9154da1925e129","first_seen":"2025-09-03T16:18:02.980918Z","last_seen":"2026-07-13T01:51:04.377681Z","times_seen":23,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-2-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-2-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 461\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"1cd-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yjP1o9XL9ll7Vx96QoR6e2SZwlpdiKyIceyuOf8J8u%2FQqtObWXwMwIisz%2BxyRcem0rxLnjuvmCdnFj%2BY1qNyPAW9CHtN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cc5b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"9d4021decab44c5f92bab051f8ca5984","sha1":"48341fafbd709eca06b41d1f8701150c17fb3bd1","sha256":"7249bc6d3211df8cbacfc8c90ef1dd86dcb63e07ca3a4bacc5f956cff4d3606b","sha512":"5e1d8f2c62cccde2f387a276a0442eb7d22097b7d32a41de8568270ee42c7b2b4b9f6848aeb2f6eab4821494060941ea034db13d30f9020b6906afca1090570e","ssdeep":"","tlshash":"3bf054890de81e14ce80c1014bf52b71607d110742104f48154e446d38b436e12c506b","first_seen":"2025-09-03T16:18:02.986541Z","last_seen":"2026-07-12T04:05:48.97043Z","times_seen":12,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T16:15:44.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 23:32:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nx-powered-by: PleskLin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRhda7hPTE%2FwPF0HpGVswvmA9MXZiNYwKUjdgiRJv3UkvTbD%2BEQd8qnUMEr2kYTGbG6GnUV9qvwq2VV3ryPCZn8dD0Hc\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b83cbed4833b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":59382,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (611)","md5":"043e994862d90e1f55dd881c0ab8f4a6","sha1":"fb0e87ea9bd970c6746c50d82a9c0128c06fee2f","sha256":"5b846c3eb331beb34eb75a2938c868dcf320b35591daa54f95fd10d764e5af3f","sha512":"0825e7f4c80d053de2e1b0d2df8bbc2768a41056345ff32a354db51c457000f2037a584ee013d7af629da9180ce373da406055b5790f50118c73bcbf83f5b92b","ssdeep":"768:4m5vXfXHpPUihsKV4rcW++8xrjUEGK0YxoZnScoU1jh6UcgeEr3YXf+S:4iXfu9dErjP0l5bz6UuooXf+S","tlshash":"e443821053f425731197c0802bb65b6ebfa1c2abd92e194431ac8bd62fd3d9ace3359d","first_seen":"2026-01-03T16:16:11.328786Z","last_seen":"2026-01-03T16:16:11.328786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":42,"dns":26,"connect":1,"send":0,"wait":112,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/css/styles.min3769.css?t=1716901816","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/css/styles.min3769.css?t=1716901816 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 28 May 2024 14:10:40 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6655e5e0-f364\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXf6JVuzq7lORyKKyx%2BTvo0D0bOrVk5xhmYeS9xAMzEy5T6%2BZC%2FwxLR3vYtomNhY6wbQiOhwd1pCYBfCtSAEeJM5HzjJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef1ca4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62308,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62304), with no line terminators","md5":"bb33f825839aa513de3a9e8ff4996fcb","sha1":"64f401a0a6645493cc6276090862d257d8b66417","sha256":"8f8218d88a7627af716ae5053818dd9588ab247c5c219e622349c64913428d3d","sha512":"88e994880e95637667446ccdb79beba621d54c4de0b2eca8aee75bdad3d9849a0c3d86faf4a7980e431d047e4bf53e3e93d1b8702b0c88cc08c52f3a3df66fce","ssdeep":"768:++Y+g+rjXQCucoxr7+8ThLeZXyf952s8sbZQO:+BtLCfojeZjO","tlshash":"4953d611f615343df02bda36b9c2baad31289503eb530bebe556a175c6ca0f713b1b09","first_seen":"2025-09-03T16:18:02.979497Z","last_seen":"2026-08-02T02:28:56.07442Z","times_seen":17,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/js/scripts.mina9ab.js?t=1692681794","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/js/scripts.mina9ab.js?t=1692681794 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 22 Aug 2023 06:23:14 GMT\r\npriority: u=2,i=?0\r\netag: W/\"64e45452-4958\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJ%2BaQbFqBm1A65%2FaM4oq1K336wb9oISd5M37k2SwBONPM179M6m%2BN0SXOPtknm%2FfvHA%2B1ftnbjSE8wY6guWMqKTFenoB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cb4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":18776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3690)","md5":"0d1cda2a69b6648b6f58ab8a9cbdea3d","sha1":"a1d4270392af16b14f2d660a44458695fc179579","sha256":"dfe7973aaafa16c656efb7f11f57132f84c2bc6f3629a005ac1e88f2731d4d24","sha512":"0c1a63a33ac30ec4e9cb39d73ed1dec055387c449ee65cfde5ba17ee01bb6cd2c9aeeddd683a4795101fac4e9bb4ca90ada9c34913b5dce800e5bce5b8502fc7","ssdeep":"384:WoXMMhJtx0AOvHXKjKEPRnCjB1JWKbZZ3tpn:Wo84Jtx0VXKpPRn2x","tlshash":"8282e959b3203a6f52fb63f3306bde05a3f219a7960e8154d13e90765e70442ba1bf1e","first_seen":"2025-09-03T16:18:02.965957Z","last_seen":"2026-08-02T02:28:56.078633Z","times_seen":19,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/logo-whitee1c9.png?t=1653468287","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/logo-whitee1c9.png?t=1653468287 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1537\r\nserver: cloudflare\r\nlast-modified: Wed, 25 May 2022 09:44:46 GMT\r\npriority: u=4,i=?0\r\netag: \"628dfa8e-601\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38sQnP1fyrWsYQn8k%2Fuqek%2BwDQTa81lTTmygdDr6efSOSCZ13SoSHhP4S0TuvJURjfYtMN3%2FNacBx4ZUGoj0uGivz2vj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cb7b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 132, 8-bit/color RGBA, non-interlaced","md5":"b96dfdd26946842a3a7fc5ad4957c4d8","sha1":"21620d16a94b1412a8844ab4948fbf1fc4994c6e","sha256":"c7d574de77c1eefc84badfd39f5d233646d6c5e64eb54cb8f5e23f11925942f1","sha512":"428e65b0c58832dc25ceb8e7d79876074c5f40a04436b705414a1ecae774fbf6adae5a6cd99d21d54f0d999c7cae792499a60aec7c3b8af20e9a517257c7d97d","ssdeep":"","tlshash":"de31f795168069e5cb3a19b4834813a6ef754063ecb090ea9a9de324c84c4f16eac7c0","first_seen":"2025-09-03T16:18:02.972965Z","last_seen":"2026-07-13T01:51:04.37719Z","times_seen":12,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-7-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-7-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 444\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"1bc-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4tWQNnrOyNmxDP18VTk9mZIIrxHI6G4UF5xlV%2Bh%2BFx55Qgadduk5vvUNdaQ9nXr7GY4pZKVKugEo5OOOuc7P4cOg%2BN5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cdeb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"6cc782c102661fea5eb1290323b596ee","sha1":"abc4c1be072d79dd08c146f6eda9e03eb0fdc864","sha256":"adf34b48a46ebf4ce1e3ef84f7b371b0a1a890c7794f395eea9abb99dbede8db","sha512":"d675d0603b1224f946cffac81d121e463b1c1a5c79b7637db9224dbc3e753cf7b441d71bfa07dd3a449d20bea52ea7ce4606beca277db4c8121eb7423ceae934","ssdeep":"","tlshash":"e4f0b39613b0ccf98faa915083c68531f12ce77300188235cc0089f80b323423079202","first_seen":"2025-09-03T16:18:02.978679Z","last_seen":"2026-07-12T04:05:48.982006Z","times_seen":12,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/fonts/jetbrains-mono/JetBrainsMono-ExtraLight.woff2","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/fonts/jetbrains-mono/JetBrainsMono-ExtraLight.woff2 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/assets/web/css/styles.min3769.css?t=1716901816\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 69780\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-11094\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMW46twolpGul4JfbdJCDP25p6s%2B5P1QSmM5JVLc8rfft3mmbWZDhH6%2BGQWMH2OwigbS8J%2B8t9byTyQFvm%2FjDOEJAxTz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf08e1cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":69780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 69780, version 2.15860","md5":"8a95b9f3167630fe43a63e43a83e5b2e","sha1":"bec36c59eeb4b9605fa043218425f7458ee946ac","sha256":"a74bfbb733f8edd84e647bd6527cfe69564d91d14fa90e7475b23041cf72678c","sha512":"1b8004feea8c89719b209e93347f168f03f32229f48b6fdb81751649a6dde2876e6e8108b309a123aeefe7e44ac4534a7856d431c1d97ec8be0b9dc6530e4f96","ssdeep":"1536:DdPwWslFq88xyETd7MLTbu2LQ8Cg7n5xRVZf7tosm:DdqTheyETd7cTbBLQ8CafdtoB","tlshash":"b663020b4132a249a85c832ec9c71414b9b74e95b2e4ceb2454ff6e93a7c79147b1ff4","first_seen":"2025-09-03T16:18:02.984387Z","last_seen":"2026-08-02T02:28:56.073879Z","times_seen":24,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-5-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-5-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 348\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"15c-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q7DXHUCnOQf9QUP4b%2Fnl7w8y%2BAcids%2Fnsmvgq5DjZtMZTMg0ppaASiQyKBOSewj7zQgwADR8AJwe31NXK35FgV6cU4nv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cd8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"d7109acec68f7713d7c1e4df117bf0f7","sha1":"5054a48eb1e822aea73ec686e8c90d72dc9d6398","sha256":"63c6e0740025804414e78dc8c33ff2f20beb01a8f67c72203cea8a3b82576149","sha512":"076fdf039a318f96fbd1303c0d173037c7f0f2317db227348c2a078b80b4a8008b925740cd391b34e70bc7fa739a04b204e8915435b45e74c7ef6999a1b43739","ssdeep":"","tlshash":"18e0c077935ae1f8ef6a09311669842f5c324f7f08d1072e2800c9145c8d8ca006451b","first_seen":"2025-09-03T16:18:02.982735Z","last_seen":"2026-07-12T04:05:49.003944Z","times_seen":12,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/decor-3.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/decor-3.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/assets/web/css/styles.min3769.css?t=1716901816\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 11712\r\nserver: cloudflare\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\npriority: u=4,i=?0\r\netag: \"63a1c16c-2dc0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iWKUm645EGgqZLB5D4GDLQ8e6qZlkh1pJo95R4rXVJ2%2B9n2v6KBRSCfyIrJ4hhPnApemLcTUt6dbRQhoxkGNSg37hlv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf06e05b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 402, 8-bit/color RGBA, non-interlaced","md5":"7f9f2a928facbbcb43cd8c06cd607bc7","sha1":"0f0e49c237c8e75b4b7ed0bdb030ef9dfc390939","sha256":"5215dc743482e61aeaf5ac275fc8bf22849a5685ba246bfdfb36cdc1e52e7a64","sha512":"c4a1aed1b1087e074f96112b4efb488cb6d055016f06fc0ec190d42a6470f0cecc9b7088084a0b3095e6dc572fe3ffadbc4e466fde14137c6865020e7552c30b","ssdeep":"192:W8kCkWHZiTi1g+cSQwtyBaTEeWRpINJ8i58GdzXQ/bf6I1/QD7KvEWW5RQ28yu:GWHZiTi1/si3kpI78rsg51r89Q28d","tlshash":"5f329e2426fac0189eeb0ab42294af6737af5217cbfd4712f90454cda1a2d0864497f7","first_seen":"2025-09-03T16:18:02.973938Z","last_seen":"2026-07-13T01:51:04.383398Z","times_seen":19,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/favicons/android-icon-192x1922f6e.png?t=1653468274","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/favicons/android-icon-192x1922f6e.png?t=1653468274 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 9806\r\nserver: cloudflare\r\nlast-modified: Wed, 25 May 2022 09:44:34 GMT\r\npriority: u=6,i=?0\r\netag: \"628dfa82-264e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDT4BPNb26GBQzpklqwfdFjFouM3cYtSFKWdAVRQ1Fz795jA4m2%2FIwH%2FYlq5D0zVa7WJ0SpVapREYUfMWnBPBOyALONg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf1af5bb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":9806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"2e4f178ad85c5f6754864c1866e23d80","sha1":"5d130987320d11beab70042e8fb0db61e139cbdc","sha256":"d48e541b3428269a6c449f235769811bed976ae0ce392a9c4d559fe14ecf0d03","sha512":"6e3102822a31c4298f2ac280a2348b3e5acf57ec8812628f08cd6925511cc0a634863a82f1c9fa3286afaddd88b893f25c94762b021e8125c7696dc836bcdd66","ssdeep":"192:SHikeGry0b4aEQXmkPxrpHXPqy4NWBnFo/8HCTWisgrLzZMolIt:SHik1pvXmkZNiRNWBnF+8H2zhMvt","tlshash":"ab128ea436e800b204fa7ebff9f558a41952b64cb75b0fb4f8200dab7fb0c55068459a","first_seen":"2025-09-03T16:18:02.970897Z","last_seen":"2026-07-13T01:51:04.372249Z","times_seen":12,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/packages/jquery/jquery-3.6.0.minc5c5.js?t=1652093265","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/packages/jquery/jquery-3.6.0.minc5c5.js?t=1652093265 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 09 May 2022 11:47:44 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6278ff60-15d9d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q86CCsM5a2FhHL%2BvepVfx17lzfECVD0Q1jZSzZgcpYQgTEJoy50HUthRVr5ZaF57%2FVjo63q2HHIhhdNLB4EVcj9XVyTV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cb0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-06T01:01:36.941617Z","times_seen":496465,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/logo-darke1c9.png?t=1653468287","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/logo-darke1c9.png?t=1653468287 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1462\r\nserver: cloudflare\r\nlast-modified: Wed, 25 May 2022 09:44:46 GMT\r\npriority: u=4,i=?0\r\netag: \"628dfa8e-5b6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COQEjhQQMng6FadCLxOnyYAfd%2BlvCmMi4hkA3SK0LCZzUWBPJ8rFAKJBsgXGgjegyc8Hi2FTaqwldDwjNaNx%2BoZIJshw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cbcb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 134 x 132, 8-bit/color RGBA, non-interlaced","md5":"c49e5a709884bc4691685202eb38a4e2","sha1":"5dd32d00608b2e6ad78fac3636513c0e5e131361","sha256":"bc683c20b671b82de488bbb2e1f6fe5af4cb4ccd50ad559e96094a824fc2472b","sha512":"3a26e1b05f0230bc33d541e46a4ef63c84e5caec44853cb2607a751daec3cd40f59f53d6e7950fca17a6ea4e141ebd290251a110eae940437e4fb1ed097e49a6","ssdeep":"","tlshash":"b4312bd86aab6873cdf12271b5d85a03bf29f1842985e043ddb34b349024cdcf653900","first_seen":"2025-09-03T16:18:02.963247Z","last_seen":"2026-07-13T01:51:04.382855Z","times_seen":12,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-3-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-3-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 627\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"273-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qS4yl2tTVdUVcBAlUvVmmysajjAR4phenWmIesStjfd5YN8%2B9BzLGR7AY1eE3aMR34BCPSZbvcjbKzlo%2FQFNWgKtYHIn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cc8b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"3b7ea1935f7d4ff376c4bd7df94e9abb","sha1":"39c6cd440cabcc1cee73b03f4616fac0db83bf03","sha256":"d6b532664906eb35b1b73776b6972d7b6aaaeb4b0155eb61aa3c55bb1960496b","sha512":"673d5d2a492bf38d4ac13c7e66df1e05d0e3e62f1a3e492e3b721942acdcf50a4f01225053127b0d65fcd34ff8df5309cf81b46ba41f039023963865195661e1","ssdeep":"","tlshash":"6cf062ea23a9b2294f8a86301f2511d2d0c098b6d3a1a048a00b102e81b092ed88d309","first_seen":"2025-09-03T16:18:02.964675Z","last_seen":"2026-07-12T04:05:48.955704Z","times_seen":12,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/content-2-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/content-2-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 364\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"16c-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHYT8cPA%2Bra8o1pVs3jzLeJ0VLqZKJIHa6PqE9P4JPzwFG0dOfdcMOSJ6MgGN5n8yD9K7i52%2B9xU2hyKJgZu3Aum14c5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef2cc0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 15, 8-bit/color RGB, non-interlaced","md5":"deaf73214684343ba8c9fc5d6b1a50aa","sha1":"fa0824b7fa02a4713e3d8e2303b3f58698add62e","sha256":"7206adacae29aa7efe1ecdd46dbf8ec029259b49234e920217b501d4c364e87a","sha512":"9ba812853b12a4611963b347226c030e165c348d39a351a671e8acfea24b26074812e314e3d32875078eb7a7ddd7a31dee32d2c153452ed5407339434f814927","ssdeep":"","tlshash":"14e0c0d76bd06d45c714563d0e22f0d55121872683b35a6c9bd9d4b9243931c70c8297","first_seen":"2025-09-03T16:18:02.976053Z","last_seen":"2026-07-13T01:51:04.383871Z","times_seen":21,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-6-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-6-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 652\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"28c-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2MuNz2RS0309RbipQhuFOb1p9iS6ePEL9k6dQK4CTkOgS1sctTuLM9yLy9dodB0DuLkerBDpj8wvK8wAlwyN%2F7LDT32Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cd4b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"303e72699390cbc3d7374414fd9e4de8","sha1":"2b75f91a43dcc4480f2d1bbb7bf234c9eb175665","sha256":"309a2dccdf5bf544e93033bc84a138f53d9cc481d4c5139022f9a8995bf9ca58","sha512":"1feb99033003d8f6928b30aa0b5e8d2e10c11d89c3e74805a0c1469b72f879ed726a25c8ff7436096ba14ac2c8cc35000f209a74d29a3147b7b6e8fd04472ceb","ssdeep":"","tlshash":"eff0838361c000708e463469f36e4080c413b70d90a6d409a4c3765cf299ed69d4132e","first_seen":"2025-09-03T16:18:02.98352Z","last_seen":"2026-07-12T04:05:48.972353Z","times_seen":12,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/favicons/favicon-16x162e8a.png?t=1653468279","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/favicons/favicon-16x162e8a.png?t=1653468279 HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 557\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 25 May 2022 09:44:38 GMT\r\netag: \"22d-5dfd2ebef2d80\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fc%2BdJq%2BYg9%2BpmBBzwPoNH%2FEXXquHFz0BQ8jndlxrOr8dbZjnhR10XMm7MFmJORPHAwZ6NcyIj%2FOA3WLA%2FzWXBGQRc45c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbf1bf61b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"39b1307d7b8ed333b154796163887d58","sha1":"8d291a62056ac13882d2799bc1617d5fcad122c6","sha256":"303119f96aa6951bfa0d1ff0476e497f073575ee0710c48fd0541b95d34e5c4c","sha512":"c88b499db6f31724f2f853980cfdfa5266135078637fb9f7e2873296c3ec45a8f1df65bcc34325685541a2e6a1cbbc2989094d272887152541bda0af525bd33b","ssdeep":"","tlshash":"c9f0969e878176a2cde0ef37621492917cfdd77050b17d0c2a0f843d818c1646c70f1a","first_seen":"2025-09-03T16:18:02.981906Z","last_seen":"2026-07-13T01:51:04.376102Z","times_seen":20,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-1-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-1-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 434\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"1b2-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlkXNJ6cCcvAICS5WrtqYWgUTnKq9ycorwolOpPY%2BwdHLc8PoQ3S0CODbBOAZj1ELGl59wLJWkx5hixfqCYs%2BKwtt%2BRh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3cc3b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":434,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"e84c0baefff88bf41e8e3939fb34ea8a","sha1":"e3561cfa7eb29a67c4cf9c8c014f3d6e69dcdaed","sha256":"4d61c8abda1b40a14b77efeb77ff4cb735743f1bc17b54dc885f17b91f049725","sha512":"d4b8c1d236eadbb867a7b9d58cd142333406c35810e366be865b1642455195c3e20ae3abdcaf77e66545723cbf03be0236bf1db8da8e3e9306327b90ce3d7ed8","ssdeep":"","tlshash":"47e023ea73c30f294916c2364b024f0494924f5192e6928c1092f1a430917e403c161f","first_seen":"2025-09-03T16:18:02.977012Z","last_seen":"2026-07-12T04:05:48.951806Z","times_seen":12,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/assets/web/images/face-8-xs.png","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:44.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"GET /assets/web/images/face-8-xs.png HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 03 Jan 2026 16:15:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 496\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-accel-version: 0.01\r\nlast-modified: Tue, 20 Dec 2022 14:06:36 GMT\r\netag: \"1f0-5f042f1a23300\"\r\naccept-ranges: bytes\r\nx-powered-by: PleskLin\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OdUOocC2cAvPGDEBmeqjDFWkCS6I9NvJSwCZgNTcsiKkYg1f0PNh%2Fg8o5F8HdvA4JTiee%2FZwLs3misv%2Bv77Ky7cJMDd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b83cbef3ce0b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"f066170aba1dab803dc11f7488f08b75","sha1":"793cf95bdefc22a9b33c16759618f0ade5173522","sha256":"9d4fe69c84d3ce7bd45afdb625cd8468827497307f233611954a00c3ca35980a","sha512":"d4c3ed01b154bc7bab3107d330e2c20e73a5e4ca9cf30f2481f644ca8f623f9a239d28e7dad48c237fb6c21007fc59c9d905f6a0b58b6940963111b7cd299454","ssdeep":"","tlshash":"4af0ccd265d62426e37f33716f353710e573d9d7c2f405eccc15d01632815504410959","first_seen":"2025-09-03T16:18:02.967452Z","last_seen":"2026-07-12T04:05:49.006196Z","times_seen":12,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whir.ac/cdn-cgi/rum?","fqdn":"whir.ac","domain":"whir.ac","tld":"ac"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://whir.ac/","date":"2026-01-03T16:15:45.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whir.ac","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 01:48:35 GMT","end":"Mon, 23 Mar 2026 02:44:55 GMT"},"fingerprint":{"sha1":"06:3D:A6:A5:E8:C5:83:ED:E1:EF:BC:CF:D6:6A:31:3E:33:31:C0:CD","sha256":"DA:00:F7:97:FA:E5:0F:18:F8:EB:C7:68:25:B8:EE:2D:C1:CC:67:89:09:EF:CE:E5:82:1F:77:96:B9:23:11:17"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: whir.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 997\r\nOrigin: https://whir.ac\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whir.ac/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 03 Jan 2026 16:15:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6hbf%2FtHwGwQY0n1pOUn5gahuKrmw6owszrgYoB3x%2BzCk5%2BJskesxI6aEkYQcTfdxeb7gNHrz%2Fp6T4KfPpQ4GhE52Hwy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b83cbf3f9d9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-05T15:42:56.62159Z","times_seen":19396,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"whir.ac","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}