{"report_id":"905cea97-d10f-4361-b7bb-69544e9fc13e","version":6,"status":"done","tags":[],"date":"2025-11-25T23:20:21Z","url":{"schema":"http","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"172.67.167.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"title":"Chat WhatsApp","dom":{"size":16256,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15920)","md5":"63b89282c4bd40869485630add712874","sha1":"0816fe89bdedfccf1e16541948da1084c314e1be","sha256":"793b5d5a3546ac29570d1b6634ffef4007905ac188b4600baf63c6f257b98d52","sha512":"82d6be4794f3de9321f930827e3de8f240a13e86b11ca88bdf47aa8c135a835b42c047c75d94b34691ca3bb9fc0d496b18647e8ad723542ab663387d03e25c4b","ssdeep":"384:sbhYcGXnMmIo6xbhrsblJJ7XvGntq7Taxf+sL:sbhYcGXMmD6xbhrsblJJ7XvGns7Tax2+","tlshash":"2772fa43af608d2c73138b94fef6b31c740cb20aea784495bfbe86af8395d950567254","dom_hash":"domhash09cf02d4fcbcfe197433faf4267aedd2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"172.67.167.8","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-30T23:20:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-23T22:16:03.791483Z","alert_count":0,"request_count":1,"received_data":431543,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-11-23T22:15:43.326588Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"typebot.co","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-07","domain_rank":372879,"first_seen":"2022-07-27T10:46:48Z","last_seen":"2025-11-06T11:47:32.17277Z","alert_count":0,"request_count":18,"received_data":2541719,"sent_data":9061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-01","domain_rank":1069262,"first_seen":"2025-09-13T15:32:38.580088Z","last_seen":"2025-09-13T15:32:38.580088Z","alert_count":26,"request_count":26,"received_data":657206,"sent_data":14055,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.166.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/525.4c469582010574dc.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf7b02f75238722ba8e088e490d6800","sha1":"03c6f48dd15fab0bf8876b46919a586e5e72fffd","sha256":"fbf656d5ae67cbb0eb233c5c8044702270ea596ce8ff91bcedceb61e7d81102c","sha512":"0737aa52fc8ce34e7f01aecd7ede2c1dd91c6c5b712e1a781c7cb8cb94cb035040a6421e17e5250ec28c7e1d7d18441dc5a13ee15f9049e2735c9e55bf0ad409","ssdeep":"6144:UDut5HcT2mfUv1IA/AWcp93cmvDHRW064WEQ3p6kMqmGHUC3JNU+kWAkzFXWnaPr:Uoh1A9D3jWEr86k8GHUCfbXWna7hEBI5","tlshash":"81d47ca5b242f57a5faf90c9a47d9106f33c2e94980d8014fb52cd6a32d9ed4a0e7f34","size":633292,"data":"","first_seen":"2025-11-25T23:20:28.372068Z","last_seen":"2025-11-26T04:02:16.881509Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","size":6248,"data":"","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-04-06T06:16:02.332364Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0092f4ab132f0e6a7af09817638e421","sha1":"bc811db8bec0a3d08ac57ddf71e07ce8fe882587","sha256":"f2c7fb7be0ca17cd31dfc249f866c7b14b073768d61508882e4eb917607aedc4","sha512":"ad1dbeeb5741eac1f8af6745f166f702d52b315574b6b7137e3fd2059d6585f20355579f8566093b2fd0064afa7f48d294ec1d21b6467acb369cde93e635f96a","ssdeep":"768:Dj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:VcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"63e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-10-21T14:39:27.087456Z","last_seen":"2026-04-06T05:30:45.833554Z","times_seen":13220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T10:06:01.388084Z","times_seen":196101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-06T09:59:39.016388Z","times_seen":330593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T10:06:01.320864Z","times_seen":210410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0671b518eea779b52c90c7d43b78c3ae","sha1":"82955e8237460b39f949ef21d6ea7991997f04d7","sha256":"083f7f6734aa8a72f824b2f19c969dd9343f4443fa265c2fec055bcd8a252aca","sha512":"508571d75b523ec921d8cfc86c4e1475cdb1935cc72d56abaf7b7ccd51d171f175380c420a4c8af1d2e04dd83326bfc8bff881e5582001fe3128efae9f7e916b","ssdeep":"","tlshash":"bad0c94cc4610f0511a6653125492b6c31d086339e882c08fe5c0f2d6fad40f857838e","size":245,"data":"","first_seen":"2024-03-25T14:11:43Z","last_seen":"2026-03-29T04:11:38.537629Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1246ac8920fb06826ff27430ca4f504","sha1":"9d21a35066816a41bc7d44da92e126ce9bdb1b6d","sha256":"e883f51ce7187bddd50f554fe474ecd2a2c3850184a02691029931529bb8b8d4","sha512":"f4bff51b6468d495518a6897aeccd50d18513b30d249ffca69f45450e14cf96c278ad35a1d05ea42c3776cfa2512be6b3c0f623327fb10cddf1a1faab2bb6108","ssdeep":"","tlshash":"df61baae3775348b32b604d2693f0e07fb7258361a88d034cab9a7541cb14a3d37ad4a","size":3411,"data":"","first_seen":"2025-11-25T23:20:28.463329Z","last_seen":"2025-11-25T23:20:28.463329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/main-62b5178784705b85.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba9f130b212283fac672e2b743cbad2f","sha1":"acab2ea2e36861b4a516cab802a855c3f933479c","sha256":"1dd44569c457dbdd58dbe158d2a5269626da4b83cd6abc3119e8af895d914e31","sha512":"225f039c7dd8c0149bdb600e850a78c0095704948ab27301c1b8b877451cf9a073e8d750c49aa5ef177f59f5538554f9bb7caa530aa10625e7dd0409abc976b6","ssdeep":"1536:9QZH4umOJ7wGoS7jLT/jJ8qExgLeDBjU6HApSRw1iBHfAmt:9QZHBnqGNjLT/jJ8qXejHAToH9t","tlshash":"f4d31ab672d1f9a203c741d8843b0006f3691cba146e6095b3eaecd7b494d9e90f6f76","size":131218,"data":"","first_seen":"2025-11-25T23:20:28.455005Z","last_seen":"2025-11-26T09:11:49.133632Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba7a6a1444c3672cb9b5baf0a58d0254","sha1":"e341699b92722eddc5467eec5b516ea4d1a418ed","sha256":"e6ddd6763fcf3326fd5974d90f73a0fb52a0b01495ca1e58661bfa91b38a097c","sha512":"ceeec214e999ba8ad4daac29e091634cfce32682b7d5136092e7e8dda651f8f661a3168443cb1ad833135a7ea4cecc144b6f2ad3104e7168480de402943a373a","ssdeep":"","tlshash":"59014533208209fbc9faa9021b562b953a5233de9678641048d8050838bfe07e1d48c9","size":725,"data":"","first_seen":"2025-09-13T15:32:44.885797Z","last_seen":"2025-11-25T23:20:28.464815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c116e15b70f12dc84fb0bb8080af81c7","sha1":"c90eef327c627b38eabf8c3e7a9d972c73e6551e","sha256":"1550de841a4e7899fa03fc14c4d69dc2fa75ab7d24b7fa9722102a401b0f152e","sha512":"89ce2994089a11f347f910190d0cf6ad12150b4ef2d51c186debd092680b32d06ebcfacfe57eaf8f868e208de03c8b6da0f3d7b0f92da53b2d75276cbf5c57a1","ssdeep":"1536:LGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:86SOEAu","tlshash":"5d43e9863552f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-10-21T14:39:27.195995Z","last_seen":"2026-04-06T05:30:45.874435Z","times_seen":13057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","size":24288,"data":"","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-04-06T06:16:02.310755Z","times_seen":1109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/996-45064eb312c14011.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf5253404591044c5c503bcc71867ec9","sha1":"602dc27120a2e183e02cab0be7a8ca6140e0bba9","sha256":"ad66a9ed8c589b04eb440b64f11bf6e79903a8f3ea2f9289715b797caeae263c","sha512":"7e3171ccecb5f77c48393eb16e876bb2b3d3a2191b33ac052cf22b602e7d288d54780987a5ba43c4404fd457f1fca0ab667d80775d463cba25133a423ea08a9e","ssdeep":"192:3JC5UtgnJ8UhInNFmOCvEDi6kM6uqm66bCGoQ4Fc9z2uUhtVqCgDM:Y5ynNFU8MGSIaIM","tlshash":"d82285d8b3a27931538b4621e43a5103e77a1d90154e652dff3c88de3e9d588b2e2f78","size":10843,"data":"","first_seen":"2025-10-28T15:20:50.493111Z","last_seen":"2025-11-26T09:11:49.131113Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"176feb740e09f9cd12c0fbf6efa28e18","sha1":"c0904f444c4f3457f029fc5c1f865b062fbdbd3d","sha256":"b9d02e35eda5a0d58077a83e2a26b16bec7645cb112c98b7426f78ece2bee853","sha512":"ae075b8f814ee3440caf984dbad620d6c50f0e826ed9e5d8251739ae4627351b7147b7f5cd5eaa9ab699718b52e2857a8a57cc61d22963d981192ce027ae0b7c","ssdeep":"96:B8RAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:9sNukQ6jq9OVM6MeHGlQTvog02","tlshash":"60c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-10-21T14:39:27.156916Z","last_seen":"2026-04-06T05:30:45.829318Z","times_seen":13065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-KV6C9NWJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c063e1831ed836fdfd9f94049ee70be","sha1":"5d14e365cead0ac0e0884996b19c8d79266a2ca1","sha256":"332ec30ba6595f2fa8c2e70d6ff658139bb997e4458d42f4e0f07fa0156bab7e","sha512":"22a2b62ebe90b24f09ca9a229c3456ba2c67af179bef7ab5f89116656a9e35cfcec69c33641fd253c4c68016de9c2c1a3f2618f80b068f521dc96c23d6c45e08","ssdeep":"6144:HJX/WgKZtdDUI23ECULUVW66O7GQEO71skIaV0sBLatgFvu:pXe3Z3UHECUfO71KgM","tlshash":"9e9419ce73d674225396f078502f018ba57b28a2b44cc896f1c9cde42e74a9a4277f7c","size":430939,"data":"","first_seen":"2025-11-25T23:20:28.448076Z","last_seen":"2025-11-25T23:20:28.448076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/331-1190d881582b7d05.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdba7b58255dd1b460c4c5faad5b1470","sha1":"06be39b2f291c9293bcf08728122871ac85f49ac","sha256":"d6179bd7c802f16ef7e3c4920770d15ad30282d84dc4835e7c94970775ff2cd6","sha512":"e3104f772800dd5fbdfbf9a6e252b665a30ef7ae94c368fbf88369f76469dbbff4e06590ddd18f1f8d1aa379d85c6131db21e2085a3ed3681399fb52acf112e6","ssdeep":"1536:htTpmdKMoWY5LK8H1rgWZEY7qRBcVXAOS34D/Ro7Xl2SZUT84W3ddK6swEoG0L/z:PQC/DqRqVxh67e8+D6hM4eYvp","tlshash":"de047d67a94266286aa78ad5d1ef5104b33c2f05893c8070f6dd885f178ce846af3ff5","size":176976,"data":"","first_seen":"2025-11-25T23:20:28.451572Z","last_seen":"2025-11-26T09:11:49.142106Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0671b518eea779b52c90c7d43b78c3ae","sha1":"82955e8237460b39f949ef21d6ea7991997f04d7","sha256":"083f7f6734aa8a72f824b2f19c969dd9343f4443fa265c2fec055bcd8a252aca","sha512":"508571d75b523ec921d8cfc86c4e1475cdb1935cc72d56abaf7b7ccd51d171f175380c420a4c8af1d2e04dd83326bfc8bff881e5582001fe3128efae9f7e916b","ssdeep":"","tlshash":"bad0c94cc4610f0511a6653125492b6c31d086339e882c08fe5c0f2d6fad40f857838e","size":245,"data":"","first_seen":"2024-03-25T14:11:43Z","last_seen":"2026-03-29T04:11:38.537629Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","size":1846,"data":"","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-04-06T04:50:39.400284Z","times_seen":11234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-06T10:06:01.408379Z","times_seen":237409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/632abcf6-2baeffdab9340b3e.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a20e95139f45c33f76d300b0ed59bad9","sha1":"a8437f9ecc3fa6a25e40670ca007de15c646f1f2","sha256":"4551d6d96df0e6c766effbe9bcb4680c80e37767c626f7c04d0a5a0e767b6096","sha512":"ff1dbf33d8388b60676926b0abc36204d615d3727ef9403c1fca7d02b33d02376eac8d6dc72b461ce42cfea6f83ed1f0aa5bdbd6b7d9f6597744611b47b31c8d","ssdeep":"1536:w5XIW57cnoRVvvwZW99bW7tagOB7ffq1a0NiZ3kRfzYdhBa8M7:w5PmoRVvjnxzp0NiZURfKhBa8M7","tlshash":"dd731be2dd7464550b8b02f178851806d35caa85703cc070b3e9edaba4fed4d77a3ba5","size":75414,"data":"","first_seen":"2025-11-25T23:20:28.411132Z","last_seen":"2025-11-26T09:11:49.135946Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/pages/%5B%5B...publicId%5D%5D-400de384844ce21f.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa01a1538c893dd5a203352b98835d2d","sha1":"d63a5ac698b64771bafd2494fdbb87eb54246e4a","sha256":"91e2f0b3c55caed62633c74746e45ef5ee67564cab02215854483f92961feb8c","sha512":"d614d16860787544a1c573009c2a26985aafa656d8f566204781636abcfc23aa8a99c307b51eb9e4600c516c3e39285aee3e9b72a3ee440937f91c7467ccc5f4","ssdeep":"","tlshash":"4c51f99a2d525044f7b885dc81ba121e334f5f7e2d4c8930327d6d7d26e28c43222fe2","size":3078,"data":"","first_seen":"2025-11-25T23:20:28.395121Z","last_seen":"2025-11-26T09:11:49.142865Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/framework-f709fd43e7017937.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9afe6fc4292b3076fcbaa05d631e64be","sha1":"c0a6b24707045de43152aa83282dc015db6abf0e","sha256":"18a705f223513e50c485fcfa3a025d5c81c17670ac5f4b4754871c4f6afd6506","sha512":"b0c8325c87cf9969d430a811606d77a62677ac1e629ee568f8b7b1102b0d28a26917eb00bea0cf7767ccfb44ebebdba2671fe4b5e52cc4ee236d08d0c1bdc2b9","ssdeep":"1536:vQ9va9ckJgUGeO/PsVdznFjlu60MBng8/8XIKhj:Y9OOXedzna6Hlg8g","tlshash":"91d309e83996f651aab311a700ef2803733d261b280c4960e615fd9e75b841bb17bfdd","size":140243,"data":"","first_seen":"2025-09-13T15:32:44.768487Z","last_seen":"2025-11-26T09:11:49.130464Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T10:07:55.618232Z","times_seen":689847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb8a6bc67322f891cf9f80eb9c499767","sha1":"30f7326ce536c99f372d7c7a9b242f485b272d49","sha256":"2371fe085e4a98b4aeb71496e7098e897977ae806518aea247ccc75524c7ee98","sha512":"7c3596d8b5dd1b78849c5d7c9e1f9d7b7bd87b1f29cd643361ed7539b94b44449921c72d5685a06616b4d07e95bd6b860187da997c57530e10be2b7ec56fa999","ssdeep":"192:xwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:qHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"8b02310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-10-21T14:39:27.189407Z","last_seen":"2026-04-06T05:30:45.825257Z","times_seen":13360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-06T10:06:01.436028Z","times_seen":176919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-06T10:06:01.399372Z","times_seen":219531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/pages/_app-e61711268a952cd0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c00768678204925dd38643b823a002","sha1":"010775bd9b54a9dfde1f359206361fa9cf708e5a","sha256":"a753a5b4c5a4f4b685a81b02e7b0cfc65175bbfd76fde0292394d58282349e27","sha512":"9f7297dc1bb2f9dfe8a6c89fedf4bb1a951c47a166b9121ef95b92f4ae286794147b8737cc29c59504b2f7ccc4ad94f7a46d2a9bcb5b4afead6c9ca064b0c21a","ssdeep":"","tlshash":"9d01b1911ff1a96891aa13f9c17f010bb5e81c3b1a8d8fb5d2744cba3a7199c8110f8b","size":799,"data":"","first_seen":"2025-09-05T23:46:24.718323Z","last_seen":"2025-11-26T09:11:49.134222Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/69ea16bc-7131fa57144733e1.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a256272cb4de42bd3093b0fe6b99fc6f","sha1":"005f614906e3314edac803978db0cec1db2727b6","sha256":"70603123781c112e5ff67feb79147412b7852222e90361033fc544561b727bff","sha512":"c74ee5fb05bd6118a239a560d26ddeb940df2948399fdf27150f8f34cefe22e119813e1c854a04a76a14a5c46310775d37ad4039dd4cbc281ef00a45fb06b679","ssdeep":"3072:cbJid/j7qo5JASfjji4Wb20zgV3RbGpLsev6ns7BkfAUwrsraTXWtIGw:z/1fkkXCNvms9kfA/S5tk","tlshash":"dd640984f764b021835a66a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","size":325855,"data":"","first_seen":"2025-10-28T15:20:50.488764Z","last_seen":"2025-11-26T09:11:49.134848Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/Y6YSXXhSsL80EI4sR51nc/_buildManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a4e32d5841924293d5704010fb4320","sha1":"f4a3cb43d3f2d9fab4a93cec9d16134fe83a5da0","sha256":"c0fdc2103ca44aa68b120cd410d1a7852d9fd698ec108b21db0bcf3e0be73abe","sha512":"b39afda1b8fb737d00cc5c98b599d3e44c302088e51373dd28d3f8046fd6b7e8dfbf785992527816c0e3145173a33276702219f89acbab19c85257fcbe080214","ssdeep":"","tlshash":"4551c182dc229a397a43d4f466281a0244b34832fc2db5c9efa9cd952cbd60d4262b33","size":2855,"data":"","first_seen":"2025-11-25T23:20:28.435005Z","last_seen":"2025-11-26T09:11:49.136633Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29b3653e43da54a3b1460d1f47152fa6","sha1":"6aa28cfe92022d4afa358f375b2d91ae584380a4","sha256":"78d4ab03663747244df8e3962d7426e2c04ec9dcbb06e32683d2a2e596497996","sha512":"14b2615fa9b1d4b7f5c14a93e027722e3adefc1415970ffe7d7b5c7cfb428564b4e19d09bfa7c971a29bfed86684f97763c142e40238350c502f9f4822602845","ssdeep":"","tlshash":"8151a33036067e7f13e29b883d33bf12196c0a195042b8b5f4ec84b920faa65331ae43","size":2849,"data":"","first_seen":"2025-11-25T23:20:28.467423Z","last_seen":"2025-11-25T23:20:28.467423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-06T10:06:01.436548Z","times_seen":109868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/__ENV.js","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a83bd199a6cc5a202b263af63eb41b1b","sha1":"84162628b5327d6dbd3d0b9482ed15602324ec00","sha256":"a17aef0149a59d266cb20d4e8edaeed104b8b1270c384c0b2825eaa0145564c1","sha512":"2cffd78626b1f76623fcfefbf95698906a7724fe153c2d3299f46f2a32e0119475aef25e32dd8a85afa617b9e0f99cc16daa27fc798744979244258c327e06c2","ssdeep":"","tlshash":"e8319917c0b607c21a4d119226ef2a8b7c43ad675fec24acd5c9a81c9c94fb09ff8139","size":1746,"data":"","first_seen":"2025-11-25T23:20:28.393731Z","last_seen":"2025-11-26T09:11:49.133114Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/webpack-0d97e65d01ea46e0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3c003bf28af0006d393b3bd08c4066b","sha1":"cd0fef46b4e6a85d6d24a1bc26d171cd828639a9","sha256":"897f6c4c69d56d9f811ae6a88ac4dfc0ca0e39903139c41fdaabde986383497e","sha512":"76c6026f915ec7c83315c7b79031372c1b9dec36778193a768da41758abbf66b1c1c42e960ecc4e986b09d9625704c154479a267c0bb26cc21a7e0cc39303715","ssdeep":"96:kU439Bxqe6tutCAQ2CdNVzPXVJDPqSGFG9Vc4jqAXXP6pZxqR:pMQt3vhXrDyk9bXXyLxqR","tlshash":"9891c5b63660fa7512f110d9983ec142f628213b165ee8b0a32fdcb96534ed105a1ff3","size":4341,"data":"","first_seen":"2025-11-25T23:20:28.460976Z","last_seen":"2025-11-26T09:11:49.1283Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/Y6YSXXhSsL80EI4sR51nc/_ssgManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b404e23d62d95bafd03ad7747cc0e88b","sha1":"011268d6627898dc2caac8b9678086cd9b9a7dfe","sha256":"678f6ce2cb80b1fe72fc67e7412be6e2ab6ada083111b64f7c40d35e3cba5e00","sha512":"ace34d6bf477fd92430938c0e2c1b7bdbdbca51aaf2b7b9acb7002f3ad457a27fc42e7eea7aec65cad2c761aa87c5a2b612b4e40ee1de01f108efe43e07f02c8","ssdeep":"","tlshash":"99a001f0843ccc60ea63ed1c127113228fa05222651d28938afd2056c0311414300d50","size":80,"data":"","first_seen":"2023-04-05T01:40:13Z","last_seen":"2026-04-06T09:45:23.249411Z","times_seen":6049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T10:06:04.608107Z","times_seen":642710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-04-06T06:16:02.266021Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8cf3e71fce4a64a8435ca8d765128f2","sha1":"220e5a153d0cae6adc47e6e8c5d2bc91229cfe48","sha256":"55ff8b270a839e01bf71441b2bd90203015f27c9f60c18d83caffd889ddabbfe","sha512":"446a9bc269f37a7914c032ce2ad26d693a3c35e7905b85f2485c52976779b8258c5b8beabbee61c8c2696e55d5f9e71ec8336f612fe056696be546b5af0b9683","ssdeep":"","tlshash":"4221aa2a1a224e3193ada7dc31c63e3f0cc007365ad8f82d0699d0a541fbcddb2552a3","size":1395,"data":"","first_seen":"2025-11-25T23:20:28.469667Z","last_seen":"2025-11-25T23:20:28.469667Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/293-05eaa04499494f71.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48b20ee3186172b679bf065b56cba464","sha1":"9c19c03b65e15fd3a36ecd24cd8589a2db0c3390","sha256":"1dd0058bf8dbbc90b057e0a9043cf4df698091bbf1e11c79bbb21f87685daae8","sha512":"a86430e100e86e521292de159bf4b3eabb07bd0c512c1612e26aa19ad7fe13802318f7237879e740e75bde0e5c2b3b96965b77e57755be5c1577766599f7a7c5","ssdeep":"24576:DgchbjNau3az3N4Z0mS3itz0ybHO5MLIF/zEsm9vMeos5TT:DgchbjgKazd4Z0mS3itz0ybHO5MLIF/4","tlshash":"c9255cdab691f11243a322a5443f400bf37c5d65980c9468f7e6d8ea7db8c4962bbf34","size":1002344,"data":"","first_seen":"2025-11-25T23:20:28.425842Z","last_seen":"2025-11-26T09:11:49.137902Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/996-45064eb312c14011.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/996-45064eb312c14011.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3815\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"996-45064eb312c14011.js\"\r\ncontent-encoding: br\r\netag: \"9f67503217b99097e67f5997aeaed2a1\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/996-45064eb312c14011.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::52pzd-1764098423141-edc443f09397\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB%2BRugmuuC5FazkEQkaKQy8II3DxVnyeGf0oyGl2pLYkJyTaHhEZqUZubLF9nUVJkc0WWu7RjgrBSEJUtHLCT9TnHYN%2F45TS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e993b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10843,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10843), with no line terminators","md5":"cf5253404591044c5c503bcc71867ec9","sha1":"602dc27120a2e183e02cab0be7a8ca6140e0bba9","sha256":"ad66a9ed8c589b04eb440b64f11bf6e79903a8f3ea2f9289715b797caeae263c","sha512":"7e3171ccecb5f77c48393eb16e876bb2b3d3a2191b33ac052cf22b602e7d288d54780987a5ba43c4404fd457f1fca0ab667d80775d463cba25133a423ea08a9e","ssdeep":"192:3JC5UtgnJ8UhInNFmOCvEDi6kM6uqm66bCGoQ4Fc9z2uUhtVqCgDM:Y5ynNFU8MGSIaIM","tlshash":"d82285d8b3a27931538b4621e43a5103e77a1d90154e652dff3c88de3e9d588b2e2f78","first_seen":"2025-10-28T15:20:50.493111Z","last_seen":"2025-11-26T09:11:49.131113Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/525.4c469582010574dc.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/525.4c469582010574dc.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 180747\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14376\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"525.4c469582010574dc.js\"\r\ncontent-encoding: br\r\netag: \"db8b4b19ad88016a90f747939894331c\"\r\nlast-modified: Tue, 25 Nov 2025 18:56:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/525.4c469582010574dc.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::88pfw-1764098423436-fd35b20d6a27\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BvIoBLrM0tHFYWGy%2BsyVQQb%2BAT9wMRY6XYIw8mwYECQ668gQ8C750Qd3Uk1DjhS%2FmS9ohZgVspmwCgwVUL2tThpR5u3Hcja\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc48b6bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":633292,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aaf7b02f75238722ba8e088e490d6800","sha1":"03c6f48dd15fab0bf8876b46919a586e5e72fffd","sha256":"fbf656d5ae67cbb0eb233c5c8044702270ea596ce8ff91bcedceb61e7d81102c","sha512":"0737aa52fc8ce34e7f01aecd7ede2c1dd91c6c5b712e1a781c7cb8cb94cb035040a6421e17e5250ec28c7e1d7d18441dc5a13ee15f9049e2735c9e55bf0ad409","ssdeep":"6144:UDut5HcT2mfUv1IA/AWcp93cmvDHRW064WEQ3p6kMqmGHUC3JNU+kWAkzFXWnaPr:Uoh1A9D3jWEr86k8GHUCfbXWna7hEBI5","tlshash":"81d47ca5b242f57a5faf90c9a47d9106f33c2e94980d8014fb52cd6a32d9ed4a0e7f34","first_seen":"2025-11-25T23:20:28.372068Z","last_seen":"2025-11-26T04:02:16.881509Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743889507\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nlast-modified: Sat, 05 Apr 2025 21:45:07 GMT\r\netag: \"67f1a463-9cc0\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7of22QGH5uRtHhiJ5p%2FKpEDGzy%2BO%2BF2bZq2V4djQWXWD9JGgrJotIh5D6Hd1tDT8mW8naJvGYaZ4ZH4J6KdQP62qmaS2cd3AgP8JvdWY6HhgZGlEpS4Vks0OZzWwoBz71Bf%2FgG1DxJK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbf48671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-06T10:11:42.544918Z","times_seen":718473,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T23:19:57.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-json/wp/v2/pages/85\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\u003e; rel=shortlink\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-micro-cache: HIT\r\ncache-control: public, max-age=0, s-maxage=100, stale-while-revalidate=30, stale-if-error=1296000\r\nstrict-transport-security: max-age=31536000;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaDHH%2BDx80b9IozxOWzDc348w8%2FKo20AGzHRkzzIf5WxAcuKIteXFUWsLu5ax4kEz5uxZuNFD%2FhdoIPhF3wB6b0URdlTP3lIRZKCClMfldPODbkmVog0zwHqmP4joHcnz7fQyDuly8QM\"}]}\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 25 Nov 2025 23:19:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a44dfbb4d0d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.166.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":30164,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10901)","md5":"e2d66aac42d7c101e2b4be8f71638516","sha1":"52cf2fb8017e66d7b36761a317e39d700ad7c8ec","sha256":"530b257bcc5796f46a80fbb9c7e7c66ab5c7557cf5e50794a1681eb5f3a7da50","sha512":"78476a8e6abf5bd37fc9ee4a5b435c0ac4493bb3e07334b85665d50c0367deb5ac32359d93bc17fadc2aa1f7511e7f77e5328690a7f2853190effbf4d6a06fc7","ssdeep":"768:IBdL0nZdapQe1oNOFB9emZxOJbEF3PEUMNTGbBbPh4:IBdUapP1uOFBRzOJbEF3PEU6GbBbPh4","tlshash":"bdd20a32b06604377b5f879ea063732c9d9c9a198a05e675b4fc206846f5df722b360f","first_seen":"2025-11-25T23:20:28.376049Z","last_seen":"2025-11-25T23:20:28.376049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":31,"dns":13,"connect":1,"send":0,"wait":166,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1743889511","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1743889511 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Apr 2025 21:45:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a467-679b\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onaZm62NUr%2Bfs7IZEnXThtVEn8rCqqMlNv3hhGT09GGIwgNq0yoxaHjEKLmKSqgyr1pS5A8IfzQtSqMjXbHZq%2BIhNlaOtwfciE88An1J4cBT1hm%2FlxCvqF3mxuq8Q5z2FXEIzrOW6tDi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"417de028b4cbb6fde80df765eb288800","sha1":"44993b60ac27f629fc795a05499de594e2caeac8","sha256":"7d80d4293152f289fa0de3ad01e4b24cbf063f8b2f42d63a3d75300a1d0d8d40","sha512":"d740fb37b740de24e70bfe7dea3b71c02f789404a490da8a3b3047737646dbe4592dfceb24dc4203931793a53acc5c51ff9b5559f0d2b1a4bfe4915980bac802","ssdeep":"768:bhPhDhyhohkhRhCmKj5Vo7/jKI0ZYkgRrPSJFRgy2LGiOHV5UfbHO0I1MgkFXz+M:lpNs2yvCmKj5Vo7/jKI0ZYkgRrPSJFRG","tlshash":"3bc2a8a1505b5402a7974cca73da3f21984d9049b085d5fd8ffd08e8adfbe2123a178f","first_seen":"2025-09-13T15:32:44.789178Z","last_seen":"2025-11-25T23:20:28.377645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/Y6YSXXhSsL80EI4sR51nc/_ssgManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/Y6YSXXhSsL80EI4sR51nc/_ssgManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Nov 2025 18:55:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/Y6YSXXhSsL80EI4sR51nc/_ssgManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6f6m8-1764098423140-05c3fb9a236b\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F13S3v7JaXcQ2KP3Q6BFMCgvX190h5jUpLwe2eAzAfil2Vhi78TnmHvrf%2BxqhtMYtnuqqcebQgSJrb14jkhJCEEHADBOu3eN\"}]}\r\netag: W/\"b404e23d62d95bafd03ad7747cc0e88b\"\r\ncontent-encoding: br\r\ncf-ray: 9a44dfc1f999b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b404e23d62d95bafd03ad7747cc0e88b","sha1":"011268d6627898dc2caac8b9678086cd9b9a7dfe","sha256":"678f6ce2cb80b1fe72fc67e7412be6e2ab6ada083111b64f7c40d35e3cba5e00","sha512":"ace34d6bf477fd92430938c0e2c1b7bdbdbca51aaf2b7b9acb7002f3ad457a27fc42e7eea7aec65cad2c761aa87c5a2b612b4e40ee1de01f108efe43e07f02c8","ssdeep":"","tlshash":"99a001f0843ccc60ea63ed1c127113228fa05222651d28938afd2056c0311414300d50","first_seen":"2023-04-05T01:40:13Z","last_seen":"2026-04-06T09:45:23.249411Z","times_seen":6049,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 05 Apr 2025 21:35:13 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a211-3509\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeqI5AmOOuUJZwZ7tIPgrHNuDqKUWQN6QKwatq%2BKfTs8Sb5CAbFSoLEPbIsbQOlwfzG1%2F51JCfHyu98B%2Fz5Zs%2BZ9KsJKW6T0ngHWKSpZNNR6eAUcfZxESejQiQ0CnE9%2BhtCsp4WNGqBd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T10:06:04.608107Z","times_seen":642710,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:47 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe22f-164b\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJB6mIIRkYZ0JcKDxuQw1GdOJpc2YckHSFsD8W7kbsQCvIlVg3Elz1FViN04GAU%2FSRgd%2F2yPRmRu3GFggNyP2DqFhJGPg5fpEVy19M7YSTErxAh0iCCUMJ0FUf20TrYP3wapvwCjvaXs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c891525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"176feb740e09f9cd12c0fbf6efa28e18","sha1":"c0904f444c4f3457f029fc5c1f865b062fbdbd3d","sha256":"b9d02e35eda5a0d58077a83e2a26b16bec7645cb112c98b7426f78ece2bee853","sha512":"ae075b8f814ee3440caf984dbad620d6c50f0e826ed9e5d8251739ae4627351b7147b7f5cd5eaa9ab699718b52e2857a8a57cc61d22963d981192ce027ae0b7c","ssdeep":"96:B8RAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:9sNukQ6jq9OVM6MeHGlQTvog02","tlshash":"60c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","first_seen":"2025-10-21T14:39:27.156916Z","last_seen":"2026-04-06T05:30:45.829318Z","times_seen":13065,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/__ENV.js","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /__ENV.js HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 871\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6782\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"__ENV.js\"\r\ncontent-encoding: br\r\netag: \"1a03d8bad35defa766bfad02aec36bf4\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /__ENV.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xnzm7-1764103711441-aa5efdf52867\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BIFAZNzzeOwVw6StWbFpWbe0ChOs7bo8qYv6GXkgvLYGmQofHPWp4RRlLigDHL7wvp2yPpQs6Pduv9FP9t%2FwNT3gfhNvu1B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1d986b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1743), with no line terminators","md5":"a83bd199a6cc5a202b263af63eb41b1b","sha1":"84162628b5327d6dbd3d0b9482ed15602324ec00","sha256":"a17aef0149a59d266cb20d4e8edaeed104b8b1270c384c0b2825eaa0145564c1","sha512":"2cffd78626b1f76623fcfefbf95698906a7724fe153c2d3299f46f2a32e0119475aef25e32dd8a85afa617b9e0f99cc16daa27fc798744979244258c327e06c2","ssdeep":"","tlshash":"e8319917c0b607c21a4d119226ef2a8b7c43ad675fec24acd5c9a81c9c94fb09ff8139","first_seen":"2025-11-25T23:20:28.393731Z","last_seen":"2025-11-26T09:11:49.133114Z","times_seen":3,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/pages/%5B%5B...publicId%5D%5D-400de384844ce21f.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/pages/%5B%5B...publicId%5D%5D-400de384844ce21f.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1601\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"[[...publicId]]-400de384844ce21f.js\"\r\ncontent-encoding: br\r\netag: \"1314a55ba42f10cba7f99b1f09dd9dce\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/pages/%5B%5B...publicId%5D%5D-400de384844ce21f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kgl5s-1764098423143-cb64cde9aa47\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEX9WrykjBFHn8Cl%2Fu5i9VfUXrDYc17VjmUaqbByQ%2BHv3T5kTr7%2FRTe14vfiL5H86LKSkJxrxknP935S4ZLrP%2Fiv1XWvlcuU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e996b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3078,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3078), with no line terminators","md5":"aa01a1538c893dd5a203352b98835d2d","sha1":"d63a5ac698b64771bafd2494fdbb87eb54246e4a","sha256":"91e2f0b3c55caed62633c74746e45ef5ee67564cab02215854483f92961feb8c","sha512":"d614d16860787544a1c573009c2a26985aafa656d8f566204781636abcfc23aa8a99c307b51eb9e4600c516c3e39285aee3e9b72a3ee440937f91c7467ccc5f4","ssdeep":"","tlshash":"4c51f99a2d525044f7b885dc81ba121e334f5f7e2d4c8930327d6d7d26e28c43222fe2","first_seen":"2025-11-25T23:20:28.395121Z","last_seen":"2025-11-26T09:11:49.142865Z","times_seen":3,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Jun 2025 22:46:46 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68476456-13e9\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5S0kS661oYfktHSQeBbAcwMh7EKsU7GKFBrza5xjpqHddoYfep6ehZNzWwklG8bYNWv4QexAkociJyhssD0o%2F4rzvosEaYKlNeyLIc8Yl%2BBGM6ZwhiJT%2B20uOL3XO%2FwuQ%2FRwHEoBUlfV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c481525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-04-06T09:38:26.218158Z","times_seen":26933,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:47 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe22f-214d\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7SykoIAycX3ujgX2VgaVe6cIjXtdqO0ONJXj7vX%2F8VtrGknVdRZaXnpm1msukcnX6AORRug5GaawVWNaEvu2CykVi9Jsfzxl9V1Rh69KWuKiH02q6a7STI%2BuUVBwQicl3Kw0ASA5EsU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbfc93d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8525,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"eb8a6bc67322f891cf9f80eb9c499767","sha1":"30f7326ce536c99f372d7c7a9b242f485b272d49","sha256":"2371fe085e4a98b4aeb71496e7098e897977ae806518aea247ccc75524c7ee98","sha512":"7c3596d8b5dd1b78849c5d7c9e1f9d7b7bd87b1f29cd643361ed7539b94b44449921c72d5685a06616b4d07e95bd6b860187da997c57530e10be2b7ec56fa999","ssdeep":"192:xwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:qHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"8b02310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fb85a6d82377b7f1","first_seen":"2025-10-21T14:39:27.189407Z","last_seen":"2026-04-06T05:30:45.825257Z","times_seen":13360,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/2025/05/cropped-wicon-192x192.png","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-wicon-192x192.png HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_P53QNFR96V=GS2.1.s1764112798$o1$g0$t1764112798$j60$l0$h0; _ga=GA1.1.1432328540.1764112799\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 8629\r\nlast-modified: Wed, 14 May 2025 19:39:46 GMT\r\netag: \"6824f182-21b5\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=be6E%2Fey6zgPntJssv6USkKnmmdlGr3BeNP79Y9B5E8WkMtqeN%2BsUnMfJcphH4lcdMUiHiun%2FtIVidbCkdUmWhqfAefHjfXKnFyaRhANzfjaP9lgbk5sVZfSKFqJ7vgbjlGjOp9C%2FFrYq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfc09aa81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"021f930623b977bba7138eb460f3ed47","sha1":"0a125934e65de92cad6ac7bb8515bc178ec8a8c0","sha256":"157aae9b2d967dac3c1811aea108e787869f4e630a58bca1ffbc850642ce2ca6","sha512":"6ad9bc881b87dce6cc05a8640a31d49d87935dfe4876214d7ed9dc5792a25fa2c6e8e1ad7db748e56288637544cb287a7332103173758af039674a5bb66f5455","ssdeep":"192:SbBlNtRn0IfHYnEn8L2JyMP0k6IciRxDlSJGUs4tYdilQcikE:SbB7dC/6JyM16lUxDl4s4teilQ2E","tlshash":"1b02afad6bca5efb821ca397165970e1c7a90c1715d7f83f05c47689bab032d1301fa6","first_seen":"2025-09-13T15:32:44.807386Z","last_seen":"2025-11-25T23:20:28.397753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/2025/05/cropped-wicon-32x32.png","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cropped-wicon-32x32.png HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_P53QNFR96V=GS2.1.s1764112798$o1$g0$t1764112798$j60$l0$h0; _ga=GA1.1.1432328540.1764112799\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 1105\r\nlast-modified: Wed, 14 May 2025 19:39:46 GMT\r\netag: \"6824f182-451\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90j%2BjZgQftFZnG5fjf8%2FsfEtK2rXs1qfkT1y5D8Nf%2B3Zd1S6svUJJ8HNEob%2BE2cU2vqZuLXazEEejrGgG1mT2pL6v4fBXi69G%2BN6L5QY%2FLY%2FHPIUDKgl%2FxjxZwWsVFHQ01aFYnC3apgz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfc09aab1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"411f3f7e4521e3b7d11e418c852a0c0a","sha1":"d85137e9310da71372ac22412ae2053a7e0c486f","sha256":"cc0006afcd2a147e28f2fb009acf05e8759380c45aff75732a49f9cf67cb0281","sha512":"0bdfe92b2e238169cf77aca6210bcd93720cded233a8e0d52bff91da7824cb277f24f526c2795fb9936842f34e09e910df4ae20262b2f1de59fd630535e53790","ssdeep":"","tlshash":"281196de6a30a4f5ea02527b5e140542c91193432777154967e2f69c05a8e0365da68f","first_seen":"2025-09-13T15:32:44.816191Z","last_seen":"2025-11-25T23:20:28.398735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/632abcf6-2baeffdab9340b3e.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/632abcf6-2baeffdab9340b3e.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 20191\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"632abcf6-2baeffdab9340b3e.js\"\r\ncontent-encoding: br\r\netag: \"a11c35703af1e140429776d239f4e33d\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/632abcf6-2baeffdab9340b3e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cfqq8-1764098423145-b9e979fe3dee\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUOnHFjIobBwoiVDGCFKU3HXN%2BOUjeMunXyXpg7DxdavTDTuBZ7ieOAA8WwHBvMSgZVrmTz%2BDhDthMQ3NDJGRyYIl5LVq9hb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e992b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43768)","md5":"a20e95139f45c33f76d300b0ed59bad9","sha1":"a8437f9ecc3fa6a25e40670ca007de15c646f1f2","sha256":"4551d6d96df0e6c766effbe9bcb4680c80e37767c626f7c04d0a5a0e767b6096","sha512":"ff1dbf33d8388b60676926b0abc36204d615d3727ef9403c1fca7d02b33d02376eac8d6dc72b461ce42cfea6f83ed1f0aa5bdbd6b7d9f6597744611b47b31c8d","ssdeep":"1536:w5XIW57cnoRVvvwZW99bW7tagOB7ffq1a0NiZ3kRfzYdhBa8M7:w5PmoRVvjnxzp0NiZURfKhBa8M7","tlshash":"dd731be2dd7464550b8b02f178851806d35caa85703cc070b3e9edaba4fed4d77a3ba5","first_seen":"2025-11-25T23:20:28.411132Z","last_seen":"2025-11-26T09:11:49.135946Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Jun 2025 22:46:46 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68476456-1550\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbRdJJrezAWkQfkbD%2FAkoUr0qiGWVwqZrXfjeEx0uFws%2BM8ao8yXliID7L5C0BdHsSyNGiKrPO9ItUPTplYjiSv01g%2BedrgCoxgvMzUNAvaPegUZyq4wFucvaogInpWoWgnerT6xPeAS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c441525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-04-06T09:38:26.18135Z","times_seen":26876,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:47 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe22f-7e6a\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2Bi3pYzXr3dEEysgm3WlUZ0pKpAQ3Lpu000Tz0pUT2xkQ2KAnth9OR5KXdjLQYoaGcYXxlBaN%2FORBbNY%2BD%2FsO4CLWGYJ9pd7hfNsZbbDCj18IBMP9vO8eB7%2BLL6v%2B6Fc%2BuPihXDZIpSp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6c9c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32362,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"c0092f4ab132f0e6a7af09817638e421","sha1":"bc811db8bec0a3d08ac57ddf71e07ce8fe882587","sha256":"f2c7fb7be0ca17cd31dfc249f866c7b14b073768d61508882e4eb917607aedc4","sha512":"ad1dbeeb5741eac1f8af6745f166f702d52b315574b6b7137e3fd2059d6585f20355579f8566093b2fd0064afa7f48d294ec1d21b6467acb369cde93e635f96a","ssdeep":"768:Dj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:VcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"63e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-10-21T14:39:27.087456Z","last_seen":"2026-04-06T05:30:45.833554Z","times_seen":13220,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 05 Apr 2025 21:35:13 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a211-12a8\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaiKX72PqQZXjGCgA9YfOJxs7p15A7%2Fnf4r2Gqg8MDPJ9IB6bO%2Fjkga5%2B%2BhhfYfq7q3wWGLTFgt8WNaKiGKt%2FavzD9rNNHwLpB8qjBY3rUhM1Izgokckaz%2BBMjdNVQI5grHbKPYh4m80\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6ca21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T10:06:01.320864Z","times_seen":210410,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 05 Apr 2025 21:35:13 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a211-23b5\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huaKJoMTcPsubfiPC0MYKw9ZDD%2BUBzl64sBspC%2FiI%2BMiTsiDy5PhuFd40ybiOyyE29vZ6%2FKeIjuBiMsqthBx5wfu%2BDlptAKHdxwA1gUjTtpatSmVn7fKA0MUSiG43bqmn72c2xQ8265B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6ca61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-06T10:06:01.408379Z","times_seen":237409,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sun, 27 Jul 2025 15:05:48 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6886404c-4b33\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZxWH9E%2BCymwQq%2F5lSq%2BIdQkkIzv9cefEBtpVHRLaQhOHuxrzvMkFPeu%2FsuFdz4igfFA3e7O9tr%2FhjnBNA6OYpbaz8LrkBDAlZWatkYb%2Fj0yiDGPrHvKQzZv7WYla7v9UFBXos6K%2FYXS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbf88d31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T10:06:01.388084Z","times_seen":196101,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/pages/_app-e61711268a952cd0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-e61711268a952cd0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_app-e61711268a952cd0.js\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Nov 2025 18:55:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/pages/_app-e61711268a952cd0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9k4ds-1764098423143-3980f1a7100e\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0zeJQRy1axckkUCUKhNFjVjxXFuD%2B5Xc1ehYQqvxZA%2FFyhWSZcC%2BVKQ4D8gr50dvQcLYBMH9sxAl%2F40OUtEkWniAHb%2BmA0j\"}]}\r\netag: W/\"f0c00768678204925dd38643b823a002\"\r\ncontent-encoding: br\r\ncf-ray: 9a44dfc1e98fb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":799,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (799), with no line terminators","md5":"f0c00768678204925dd38643b823a002","sha1":"010775bd9b54a9dfde1f359206361fa9cf708e5a","sha256":"a753a5b4c5a4f4b685a81b02e7b0cfc65175bbfd76fde0292394d58282349e27","sha512":"9f7297dc1bb2f9dfe8a6c89fedf4bb1a951c47a166b9121ef95b92f4ae286794147b8737cc29c59504b2f7ccc4ad94f7a46d2a9bcb5b4afead6c9ca064b0c21a","ssdeep":"","tlshash":"9d01b1911ff1a96891aa13f9c17f010bb5e81c3b1a8d8fb5d2744cba3a7199c8110f8b","first_seen":"2025-09-05T23:46:24.718323Z","last_seen":"2025-11-26T09:11:49.134222Z","times_seen":10,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/293-05eaa04499494f71.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/293-05eaa04499494f71.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 275323\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"293-05eaa04499494f71.js\"\r\ncontent-encoding: br\r\netag: \"cb9a9c364e195fba62794262a8821504\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/293-05eaa04499494f71.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24jzn-1764098423146-4c0c76fc0ced\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jLI2r57qQT1pxN5Rrfa1V%2FAfWFwQuGFb0yolk1ets4j1Kpp4dotPlTvGNsOQR19DnCeI%2F0rYlxnkiFR3Lty7a%2FvoY1PYqRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e994b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1002344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"48b20ee3186172b679bf065b56cba464","sha1":"9c19c03b65e15fd3a36ecd24cd8589a2db0c3390","sha256":"1dd0058bf8dbbc90b057e0a9043cf4df698091bbf1e11c79bbb21f87685daae8","sha512":"a86430e100e86e521292de159bf4b3eabb07bd0c512c1612e26aa19ad7fe13802318f7237879e740e75bde0e5c2b3b96965b77e57755be5c1577766599f7a7c5","ssdeep":"24576:DgchbjNau3az3N4Z0mS3itz0ybHO5MLIF/zEsm9vMeos5TT:DgchbjgKazd4Z0mS3itz0ybHO5MLIF/4","tlshash":"c9255cdab691f11243a322a5443f400bf37c5d65980c9468f7e6d8ea7db8c4962bbf34","first_seen":"2025-11-25T23:20:28.425842Z","last_seen":"2025-11-26T09:11:49.137902Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/Y6YSXXhSsL80EI4sR51nc/_buildManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/Y6YSXXhSsL80EI4sR51nc/_buildManifest.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 847\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-encoding: br\r\netag: \"15104e2b70dc304af96a77f1b9f3a33e\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/Y6YSXXhSsL80EI4sR51nc/_buildManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::88pfw-1764098423141-cc03a462dac2\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9kBiKsZEQcvBSSFW36JxyAsWKdyfG1083ykj4qKpYhkLW%2FvolyKKBdoUD%2FAhSvl9t73TXRLdBN3AQVq8uOtxHoNJscN%2FLaS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e997b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2855), with no line terminators","md5":"18a4e32d5841924293d5704010fb4320","sha1":"f4a3cb43d3f2d9fab4a93cec9d16134fe83a5da0","sha256":"c0fdc2103ca44aa68b120cd410d1a7852d9fd698ec108b21db0bcf3e0be73abe","sha512":"b39afda1b8fb737d00cc5c98b599d3e44c302088e51373dd28d3f8046fd6b7e8dfbf785992527816c0e3145173a33276702219f89acbab19c85257fcbe080214","ssdeep":"","tlshash":"4551c182dc229a397a43d4f466281a0244b34832fc2db5c9efa9cd952cbd60d4262b33","first_seen":"2025-11-25T23:20:28.435005Z","last_seen":"2025-11-26T09:11:49.136633Z","times_seen":3,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Jun 2025 22:46:46 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68476456-1c0e\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qL9yO6P50PPuF0drcftNxB%2BDdI4gW%2BVYemcOGW6jMHyzFBsfIGIhHpfVDL6EsJ1VsnYRC8JeSAPLchFh%2Bhz8YQ06d8In6z3Z1gEW6ZUs56wOyaCM22RDFFOvMgf%2BXu0Ro7YmmC4JEV2U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c4c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-04-06T09:38:26.225206Z","times_seen":26956,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/css/post-5.css?ver=1763490200","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1763490200 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 18:23:20 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"691cb998-595\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dTJ6IQc6KH3sSbdbmzo%2BKeQTKLUmh0X07wWHyhBJph5hc6iPMb5cr%2F%2FrPDNeDtO58d7LE9uAyYTRlW3wEHpjWk40DUJDsC8Wl1hXEpP18%2BoWC3geLTH8cDq5yfeYFM4kpY%2FAyfVny%2Fu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1429), with no line terminators","md5":"c2c61f788957eb375ec65a1a03b362bf","sha1":"f1d2bd12ad9bc1c1e2b91e2d853c65ce577b2cb8","sha256":"6c32f7184f71eeaca8ca39b88a177d7521a4bde1eae5d2c4f2f7777dec92ea07","sha512":"b073abdead0a3994b259a118480e41c74471b0dde996814c7f42ada32e4496ded11383b59eb8248b5bcbadf3c6504e2b19d38e235f11cbc7fc87e8b4baae96f1","ssdeep":"","tlshash":"e6216805ba23e021a07b062fd2d3b42c001cc45f915f8ddfe42d8349f9bea462229647","first_seen":"2025-04-22T12:41:11.558052Z","last_seen":"2026-04-05T23:53:54.476844Z","times_seen":230,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 02 May 2025 17:14:59 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"6814fd93-53d8\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zILaWvjOtJH9KpKjBslB3W58jJfhu8xw0kfxItQmknu2QvdQg7fLtwfb2208wMM2nZzepQ8G8F9Za2T2%2BwFss0c6IpxrpQ7D8HvMJZ3grpVSIVAQsobkuU4Fe%2FkieuRoZFSwuh%2FkmKul\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c931525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-06T10:06:01.399372Z","times_seen":219531,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:57 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe239-1868\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdw3gowxQeRm4TLE53DAnFRvk6%2Fh9%2FMKQtYzeAABlij3tY7J2U6srP1Uw%2B3OiKxERylU9Occgd%2Bwfo%2BSZrurXodcqxyZW7Ulh70FDO%2FtYA%2BPHsfi2Zmoa1xbxX%2FvFCavHcA7l9F%2BkuGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6ca01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-04-06T06:16:02.332364Z","times_seen":1104,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:57 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe239-5ee0\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ez8KJ1ImfFKHvrVfnXGrv%2BO15ImPZ94JymEPUMD8JnWaXph8VPA0ZMUTGNLEqMXWTXNoTB4x5jJfZK35%2BQeVq4DVtZJ%2BEhTQ7%2BqORyUlbdp%2F5s2IunrstAbUCEPGAv8PoHLC5Nvh6ZAe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6caa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24288,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24244)","md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-04-06T06:16:02.310755Z","times_seen":1109,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/het-19-90-03imxgo","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /het-19-90-03imxgo HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWidOyxqDzH8M%2B6i0c%2B%2B5k9Bh476ACMT8AI4FW49dQWOsf2NbMjyp0zpMLcZbbK3Cct%2FFYO4N4nOH%2F7kTSwGjvpKaaw0Pw%2BN\"}]}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=245\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /[[...publicId]]\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::lhr1::cg4bd-1764112798730-67bb810f6f38\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a44dfbfc8b656ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14199,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14183)","md5":"2a965353b3877151ac1683ee3c5201f4","sha1":"7dc17350d0013598bfc5c3009261b9e9ca2ca968","sha256":"79453e4e6116774388a4394558658ab5f29418ca80aac328b2a269a3842f4756","sha512":"446751811d72e99154191944a9e3a35fd62caa6dd7f322c2d5c8c6b584731fb4095447680b1f3d31ae8236ccc4902013778369f05a553832cc75213f8f07beb6","ssdeep":"192:vbRCTnU4bq71MmXVAsb2CJJ77cVlEF0CAorB7yntxW7OHZUTtj4xLSAr0zhC:vbATnU4mMmXOsblJJ7XvGntq7TaxfrD","tlshash":"c652f843af204d2ca3438fa9fef2a31c744cb106ea7894597fbe86afc391d850567615","first_seen":"2025-11-25T23:20:28.441424Z","last_seen":"2025-11-25T23:20:28.441424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":104,"dns":83,"connect":1,"send":0,"wait":258,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/css/85a3fdb148fb7ccf.css?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/css/85a3fdb148fb7ccf.css?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"85a3fdb148fb7ccf.css\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 25 Nov 2025 18:55:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/85a3fdb148fb7ccf.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5btd4-1764098423141-b2b68c5788dd\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sc2b2P3Suu3GNCEm1FyGqOyYJSIuO%2BNLZzMzY4cO9yV6cj%2FtMisYU7%2BijzPAg88tIzl1MREFN6%2BWevfmqCQ1H2eAYhet02bV\"}]}\r\netag: W/\"156946b7a8e2ea0d6c762e5eef0afe1d\"\r\ncontent-encoding: br\r\ncf-ray: 9a44dfc1e989b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":167,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"156946b7a8e2ea0d6c762e5eef0afe1d","sha1":"e3226065efe024a62f824d660f17620ee3a89b36","sha256":"49e7330fc2780d5b9ec7b685325976e7ab19ecd06c470091500e593bfbd2a90d","sha512":"09f1a3e666ae0e2e062566f61070a4a3e72f09960261b530a7f50c397f194230959ec45413e2e5675e310b609434ba48b385b63d13942e53fd906ae601f1b312","ssdeep":"","tlshash":"e0c0805e1b546103cf46dbb5d8976556fc056500c2c2e49d70567744c0df40406f5f34","first_seen":"2023-08-05T23:56:07Z","last_seen":"2026-03-25T16:05:29.530627Z","times_seen":196,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743889507","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1743889507 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Apr 2025 21:45:07 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a463-1b360\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SuuS77F6DQK%2Br8E2VGoT1ofade%2Bk9UoJ9ePAFveQZcusNbR1RXbLwskVTdOXwFqB9KK1vxk6QBinmOK4tFY7i%2BE1WomUY7fVocOZhPcXgRXQGQQ%2BD1iikGWwSnpC96THBSI%2BhzZecfn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c701525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"295bc5cacc84da738f56fca23e64b0ea","sha1":"9551950eb05602ce4960d0997f82197e8e162252","sha256":"4cb2f4fd5c82ebd54b10bdf8fea0ffd22750f595f1844bfa05010dd0f9f0945b","sha512":"1300d61254f95dca8b6f0265c4610814300e7aa9b3953aa08a81b74b1a1a187bed1c0d3679dc84e9cd126b6b450a570dc689c0ab477bb24313e545dd5516e0a9","ssdeep":"768:yphkpsBIKnzrbMQM58+knM88Fcq09OD7M4lLySzdxsHfFW3pJofLli0:eRYri9MXmVwzKNsvmZP","tlshash":"2fb33162000b1101a39758d632db7e34ed0ed2097544d078abfd07abeeebda523a935f","first_seen":"2025-09-13T15:32:44.836219Z","last_seen":"2025-11-25T23:20:28.44424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Sat, 05 Apr 2025 21:35:13 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"67f1a211-15601\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g65VdCgqLAwL%2FeqS9CJNgaah2D0WEZIvSJdqVemi0u4PwDvb0v4UtLOtlCcAWT6Vf7aSCC%2FQRjNaGfoHlrcZ%2F9VRg%2BtN9f2xuYyhkzws6LUgOIb15j6TVxZvbPO%2Fi5IL6SfAj4mwIIeV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T10:07:55.618232Z","times_seen":689847,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-KV6C9NWJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=GT-KV6C9NWJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\nexpires: Tue, 25 Nov 2025 23:19:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143158\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7c063e1831ed836fdfd9f94049ee70be","sha1":"5d14e365cead0ac0e0884996b19c8d79266a2ca1","sha256":"332ec30ba6595f2fa8c2e70d6ff658139bb997e4458d42f4e0f07fa0156bab7e","sha512":"22a2b62ebe90b24f09ca9a229c3456ba2c67af179bef7ab5f89116656a9e35cfcec69c33641fd253c4c68016de9c2c1a3f2618f80b068f521dc96c23d6c45e08","ssdeep":"6144:HJX/WgKZtdDUI23ECULUVW66O7GQEO71skIaV0sBLatgFvu:pXe3Z3UHECUfO71KgM","tlshash":"9e9419ce73d674225396f078502f018ba57b28a2b44cc896f1c9cde42e74a9a4277f7c","first_seen":"2025-11-25T23:20:28.448076Z","last_seen":"2025-11-25T23:20:28.448076Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":71,"dns":0,"connect":8,"send":0,"wait":33,"receive":24,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:47 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe22f-e8bb\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQULFDYpwpbtSyJjqV%2FlUbNNTHdDDj3gnSNhBbDouIa2bl0%2BOv3sRhRDsg5OdOEY3FZymzvaK0FOTMO9KImJIRJ9y9ekaTcx7Exwbjnwp2lW8EePGniPTm6qugMKnmwqGGPAoOg08ZlY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c8b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59579,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"c116e15b70f12dc84fb0bb8080af81c7","sha1":"c90eef327c627b38eabf8c3e7a9d972c73e6551e","sha256":"1550de841a4e7899fa03fc14c4d69dc2fa75ab7d24b7fa9722102a401b0f152e","sha512":"89ce2994089a11f347f910190d0cf6ad12150b4ef2d51c186debd092680b32d06ebcfacfe57eaf8f868e208de03c8b6da0f3d7b0f92da53b2d75276cbf5c57a1","ssdeep":"1536:LGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:86SOEAu","tlshash":"5d43e9863552f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-10-21T14:39:27.195995Z","last_seen":"2026-04-06T05:30:45.874435Z","times_seen":13057,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 27 Oct 2025 21:20:57 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe239-ae7e\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9PXgDmlzkbhrh1xSGESlgMtaPMkrvhWwoB4umgOu%2FkT3zS5B22YKF3jgy17LQ8R68mfO80iRq1LxEsfKkCgBv70MM%2BRhPPJKv1yTCJZXmXMjvEGikuErekbJh85ydR0C9RrHJkRzM4NB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd6cab1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-04-06T06:16:02.266021Z","times_seen":1107,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/framework-f709fd43e7017937.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/framework-f709fd43e7017937.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 46546\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"framework-f709fd43e7017937.js\"\r\ncontent-encoding: br\r\netag: \"070c2d1ff9dd2343658906cdf9176dae\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/framework-f709fd43e7017937.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f29cn-1764098423143-2dbe88c65de7\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcUVouD376uZOaMzl%2BBDhWM1OIskB8WjtQgeGaJ36cHuofj25GKZiYXCQdOY0TPCw767oWUts39gZQCjmGRjCZlbgcT%2F0QIG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e98bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":140243,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9afe6fc4292b3076fcbaa05d631e64be","sha1":"c0a6b24707045de43152aa83282dc015db6abf0e","sha256":"18a705f223513e50c485fcfa3a025d5c81c17670ac5f4b4754871c4f6afd6506","sha512":"b0c8325c87cf9969d430a811606d77a62677ac1e629ee568f8b7b1102b0d28a26917eb00bea0cf7767ccfb44ebebdba2671fe4b5e52cc4ee236d08d0c1bdc2b9","ssdeep":"1536:vQ9va9ckJgUGeO/PsVdznFjlu60MBng8/8XIKhj:Y9OOXedzna6Hlg8g","tlshash":"91d309e83996f651aab311a700ef2803733d261b280c4960e615fd9e75b841bb17bfdd","first_seen":"2025-09-13T15:32:44.768487Z","last_seen":"2025-11-26T09:11:49.130464Z","times_seen":9,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/331-1190d881582b7d05.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/331-1190d881582b7d05.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 50174\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"331-1190d881582b7d05.js\"\r\ncontent-encoding: br\r\netag: \"bb4a51a83498e59222f44e96401d6d23\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/331-1190d881582b7d05.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qsb5l-1764098423142-ae32a28322d1\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQ9xdwRgRkWeEwTffYGjhyff3NbUylE2eQNQiiBAZFj7vaJvgDbCihn%2BqFVmxa3yKR5hrqOdVdwnFoPlGjDdBuZ37jXs34eZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e995b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176976,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"bdba7b58255dd1b460c4c5faad5b1470","sha1":"06be39b2f291c9293bcf08728122871ac85f49ac","sha256":"d6179bd7c802f16ef7e3c4920770d15ad30282d84dc4835e7c94970775ff2cd6","sha512":"e3104f772800dd5fbdfbf9a6e252b665a30ef7ae94c368fbf88369f76469dbbff4e06590ddd18f1f8d1aa379d85c6131db21e2085a3ed3681399fb52acf112e6","ssdeep":"1536:htTpmdKMoWY5LK8H1rgWZEY7qRBcVXAOS34D/Ro7Xl2SZUT84W3ddK6swEoG0L/z:PQC/DqRqVxh67e8+D6hM4eYvp","tlshash":"de047d67a94266286aa78ad5d1ef5104b33c2f05893c8070f6dd885f178ce846af3ff5","first_seen":"2025-11-25T23:20:28.451572Z","last_seen":"2025-11-26T09:11:49.142106Z","times_seen":3,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.5","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.32.5 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 21:20:47 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68ffe22f-d16e\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kz9aNiaLQh5j9ZNOEUHHGSJsKubG%2FZ2ezyQPdRGl3ZCQ1ZulXaRdlFE95rZ%2FLjy9OcFJDm0myeQXyMwI%2B4XEwXP0yOteFOvU06V7eCwhMm5UUXYTNS4MVxL9aGrVDjPaLp9DxiIdA7Jh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c551525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53574)","md5":"d733fdaf3ad92b360c68873027919b11","sha1":"ae61eb510ce0c84536759f8673647420565b9dbe","sha256":"5c5ef6a7693f4c8d5ffae4a9cfb5deffa72e050c7c628be688da664ca6175841","sha512":"9a93ee68894dfe53658df58b7333dc1d1160db1d9a27f65533d46ddf246a735a150488d9a21f795e4cf4e508e87ccfd2fd596e67a993b3d240559606b74f902e","ssdeep":"384:6srJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ksYrOk:uLRdL2t7RllNX7svk","tlshash":"2633fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-10-21T14:39:27.184841Z","last_seen":"2026-04-06T02:57:21.355135Z","times_seen":10192,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/uploads/elementor/css/post-85.css?ver=1763490756","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-85.css?ver=1763490756 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Nov 2025 18:32:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEt4rgkvXM63yBefaLHvbNXuiHzK7RIMdi1V%2BaSI3HXc8zgMBMWnU9l7U0ljH7CnKWVbVGYbPDpZ4EIC1sgC8uk5i3cXbpjO4RGz2tjPqOk7pPb3uAyapmKQxYkbe%2BAPk41LiUofDp%2FW\"}]}\r\netag: W/\"691cbbc4-e3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd4c6c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"c8f51ab15ceda548883887aed8125087","sha1":"39d54e3ea1e958ee80076e4c88b7e4a1b9a9576c","sha256":"da638ada1e2d339dce5d2b4c6290a3cda4f33b9b05f1b2182c30d0452bccfa27","sha512":"7840bdcf1bb3fa295fe9b1dc37193a2ecd617b54b50931e62f159e31bbc83437b620d7af62ca5e982e59a82d85a11ba6948616d1b584f2f0083ddb920c1e00a7","ssdeep":"","tlshash":"30d0c9013e13254c971f40b7cca36da8e9029ccb825a92c3dc001637fd279867340b0b","first_seen":"2025-11-25T23:20:28.453623Z","last_seen":"2025-11-25T23:20:28.453623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/main-62b5178784705b85.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/main-62b5178784705b85.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39233\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"main-62b5178784705b85.js\"\r\ncontent-encoding: br\r\netag: \"78eca8bc459a70203ef3fef34c2e184b\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-62b5178784705b85.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5h5cs-1764098423140-f01b7b0959d0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jfIP0vw2gJJCnyO7FaDFg98e%2F1mf6G3qulVZOInplB53nU3Z7MAYgBs9klRDSwEPFy2%2Fdj2x7wxIk1NWMrf5xujMQDNuUtZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e98cb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":131218,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"ba9f130b212283fac672e2b743cbad2f","sha1":"acab2ea2e36861b4a516cab802a855c3f933479c","sha256":"1dd44569c457dbdd58dbe158d2a5269626da4b83cd6abc3119e8af895d914e31","sha512":"225f039c7dd8c0149bdb600e850a78c0095704948ab27301c1b8b877451cf9a073e8d750c49aa5ef177f59f5538554f9bb7caa530aa10625e7dd0409abc976b6","ssdeep":"1536:9QZH4umOJ7wGoS7jLT/jJ8qExgLeDBjU6HApSRw1iBHfAmt:9QZHBnqGNjLT/jJ8qXejHAToH9t","tlshash":"f4d31ab672d1f9a203c741d8843b0006f3691cba146e6095b3eaecd7b494d9e90f6f76","first_seen":"2025-11-25T23:20:28.455005Z","last_seen":"2025-11-26T09:11:49.133632Z","times_seen":3,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/69ea16bc-7131fa57144733e1.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/69ea16bc-7131fa57144733e1.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 91243\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"69ea16bc-7131fa57144733e1.js\"\r\ncontent-encoding: br\r\netag: \"7370ede200ee44da5fa680bd42c956a9\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/69ea16bc-7131fa57144733e1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g4452-1764098423152-48faf5531fae\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2j8VzD8oOkUn6c8iMSKtD1vbvDy8QPyUDdx1%2Ff%2FNzL%2BxEBn2v5pGAJ8iEsqikuwGpRsNxhG%2FqDEb%2FxZUrmnJ3pC3EoOqp%2B7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e990b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a256272cb4de42bd3093b0fe6b99fc6f","sha1":"005f614906e3314edac803978db0cec1db2727b6","sha256":"70603123781c112e5ff67feb79147412b7852222e90361033fc544561b727bff","sha512":"c74ee5fb05bd6118a239a560d26ddeb940df2948399fdf27150f8f34cefe22e119813e1c854a04a76a14a5c46310775d37ad4039dd4cbc281ef00a45fb06b679","ssdeep":"3072:cbJid/j7qo5JASfjji4Wb20zgV3RbGpLsev6ns7BkfAUwrsraTXWtIGw:z/1fkkXCNvms9kfA/S5tk","tlshash":"dd640984f764b021835a66a0052f904fe27ef91d6c4a44bcf658e8f57cbd8c9693af34","first_seen":"2025-10-28T15:20:50.488764Z","last_seen":"2025-11-26T09:11:49.134848Z","times_seen":8,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://typebot.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9a44dfc208fb0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-06T09:59:39.016388Z","times_seen":330593,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":5,"dns":0,"connect":1,"send":0,"wait":21,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/cdn-cgi/rum?","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1048\r\nOrigin: https://typebot.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1048,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1764112798574,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"217e31e7-8fec-436e-a4a6-ec059aa2a50d\",\"location\":\"https://typebot.co/het-19-90-03imxgo\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":561,\"domContentLoadedEventStart\":873,\"domContentLoadedEventEnd\":877,\"domComplete\":1037,\"loadEventStart\":1037,\"loadEventEnd\":1037,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":0,\"domainLookupEnd\":0,\"connectStart\":0,\"connectEnd\":0,\"secureConnectionStart\":0,\"requestStart\":0,\"responseStart\":0,\"responseEnd\":368,\"transferSize\":0,\"encodedBodySize\":0,\"decodedBodySize\":0,\"name\":\"https://typebot.co/het-19-90-03imxgo\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1037},\"siteToken\":\"c72ba808c5854049b7f2572866e0869a\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://typebot.co\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ih%2BwR%2BzHs9SapAXWdG60R43BuoLo3J6ViwKMuOUjA26pRbmfyFxL3pvdaHfcsNiCL0CEeiY8K3Bv2OmjLReFPMxg8ik6R3gz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a44dfc5ac31b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/api/v1/typebots/het-19-90-03imxgo/startChat","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"POST /api/v1/typebots/het-19-90-03imxgo/startChat HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nx-typebot-iframe-referrer-origin: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\ncontent-type: application/json\r\nContent-Length: 74\r\nOrigin: https://typebot.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"isStreamEnabled\":true,\"prefilledVariables\":{},\"isOnlyRegistering\":false}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /api/[...trpc]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::lhr1::dw26x-1764112799633-ebeed171ebd1\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0j8c02kTqnehzfq1ayZ0A%2FSo7wPH014u4us5gPV5d0njKGcnEzfFhTz5AKx93OzjUPW5VoE5AQQJA2Sv5f6gh5Px6qv6zJh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a44dfc5ac32b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":119,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a71867a11bb3761c09d4e2310cd06ef0","sha1":"bcca26513fd97844fb41c00e4790af47196edcac","sha256":"4884a39cec4641dc4fea97f0480ed8f9b5b95aaa7ee64022a729dcca9dc6f75e","sha512":"0a981388b5171d3acc4d102ac793236d0519732cc3a37d7235712f93f63edc044f9b46a1cf11f4b1aba8d3f888b7d35223ac55f7ccb6abd67f48b9de0899953e","ssdeep":"","tlshash":"fbb092725c45ae2b8e7a32c9318d0a118ea480ca22a4aaa2ccd9b560ef01845a126999","first_seen":"2025-11-25T23:20:28.458921Z","last_seen":"2025-11-25T23:20:28.458921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4","fqdn":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","domain":"jdfnu287h7dujn2jndjsifd.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/","date":"2025-11-25T23:19:58.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jdfnu287h7dujn2jndjsifd.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 05:01:44 GMT","end":"Sun, 22 Feb 2026 06:00:17 GMT"},"fingerprint":{"sha1":"38:6A:FE:AA:4B:97:70:DB:52:C1:6F:63:03:26:75:B5:E6:DE:AF:35","sha256":"FD:B6:F7:CC:D3:4E:8D:4B:68:A5:84:42:7D:6E:5A:9E:E0:9F:71:1A:8F:8F:6C:F5:E7:85:13:70:AD:A0:20:F2"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.4 HTTP/1.1\r\nHost: chat-whatsapp.jdfnu287h7dujn2jndjsifd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chat-whatsapp.jdfnu287h7dujn2jndjsifd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 09 Jun 2025 22:46:46 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"68476456-736\"\r\nversion: MS25102301\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, s-maxage=31536000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0HC5pJikr%2Fj5NHtEeknPlpQVSZdKt6QF5EdW2pYI%2BvsN6bx61vjCAnmgZ%2FJ3T6jozYtySQbN8AMvZWAkLGhReOkz1uX2goTdhiAHbiZv1lgnOFbA6ubiDrhK%2BIlMFaVsCtnSvypdb%2FS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9a44dfbd5c881525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1846,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1846), with no line terminators","md5":"a1e87433534214c42bc5e80a6d96f9f9","sha1":"56269ee46b410ad42b3dc1281ff85ec0b5d6bba1","sha256":"d09012005a283292d543b53dd988d15275c61904c97ebc45de2110b3d2f7d9e1","sha512":"01e58eafae7f22a4714814e5bb4d9472358eacfbf7e04c9d7a0a46e90ed0bf064f1ad1378055927d556f7c9ed5ecfa3e5a4c6cd4e08bb38a15fb58e3c64c3c69","ssdeep":"","tlshash":"f3316a66724a5d3a045ec2b72b4b6aafb26695cf9441847c7039fecf0560dd123e23b3","first_seen":"2025-06-08T21:36:43.872332Z","last_seen":"2026-04-06T04:50:39.400284Z","times_seen":11234,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"chat-whatsapp.jdfnu287h7dujn2jndjsifd.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"typebot.co/_next/static/chunks/webpack-0d97e65d01ea46e0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42","fqdn":"typebot.co","domain":"typebot.co","tld":"co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://typebot.co/het-19-90-03imxgo","date":"2025-11-25T23:19:59.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typebot.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 09:03:22 GMT","end":"Fri, 13 Feb 2026 10:01:03 GMT"},"fingerprint":{"sha1":"2F:1B:84:E5:E2:C8:34:B0:82:41:F6:AD:A0:85:57:5F:7E:09:E3:73","sha256":"8A:3E:F4:91:1B:D0:98:9A:E9:B4:F5:8A:B3:F9:55:BB:5A:AA:1B:19:46:CB:D9:E7:21:07:2C:9F:C2:01:9C:76"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0d97e65d01ea46e0.js?dpl=dpl_3KPnvaR68R4tm9qmSE6XVCJLXt42 HTTP/1.1\r\nHost: typebot.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://typebot.co/het-19-90-03imxgo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 25 Nov 2025 23:19:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2216\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14375\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"webpack-0d97e65d01ea46e0.js\"\r\ncontent-encoding: br\r\netag: \"dd830eb6368e03570deefeddea660350\"\r\nlast-modified: Tue, 25 Nov 2025 18:55:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-0d97e65d01ea46e0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n262z-1764098423139-baf9367f7cd1\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejhIvnnT43sdmxHBX75W3oW675AsTqUMK0es%2B12t0VdTD7VST1KNa9nAsOQ3I7%2FYwr03ZcOSkUgh4h1zanW27HJ%2BjNiCaNuw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a44dfc1e98ab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4341,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3902)","md5":"d3c003bf28af0006d393b3bd08c4066b","sha1":"cd0fef46b4e6a85d6d24a1bc26d171cd828639a9","sha256":"897f6c4c69d56d9f811ae6a88ac4dfc0ca0e39903139c41fdaabde986383497e","sha512":"76c6026f915ec7c83315c7b79031372c1b9dec36778193a768da41758abbf66b1c1c42e960ecc4e986b09d9625704c154479a267c0bb26cc21a7e0cc39303715","ssdeep":"96:kU439Bxqe6tutCAQ2CdNVzPXVJDPqSGFG9Vc4jqAXXP6pZxqR:pMQt3vhXrDyk9bXXyLxqR","tlshash":"9891c5b63660fa7512f110d9983ec142f628213b165ee8b0a32fdcb96534ed105a1ff3","first_seen":"2025-11-25T23:20:28.460976Z","last_seen":"2025-11-26T09:11:49.1283Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}