{"report_id":"ab208141-c05e-4bcc-b3dc-a69bfab12fb8","version":0,"status":"done","tags":[],"date":"2026-08-18T02:50:11Z","url":{"schema":"http","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"title":"whtahs.com/","dom":{"size":11339,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6580)","md5":"ed124793abd087228c8aaa3697d2aa6b","sha1":"0e2b38773d7b1fb8c14f33fb6ab052236dc44978","sha256":"633e149b8f57506f406791f084750c35a1af201053b82ce45efc22d83a0920aa","sha512":"6e82d21c9f3a2351072a11c38d5477db4ffd7300f2b9f5557f30f3899645ae7dcaaca17348cc0d0e83533f0e0e45a0e3e76f817e3eb59212cae8f0796f72ec19","ssdeep":"192:ySVb9M6W9vRP4jZP8gSuYuuxqaCYOWgYHackoP6ZfdGH0GXfqEXw+8fqtpVvER:HVbq6W9vp4lYuivxvHFkxZfdp8fO+8fz","tlshash":"ba32c67866b05a3ec17783d2a562be19305bf335d0ea896cdb670251eed2cb1f904274","dom_hash":"domhashf51f082337caf46996b9b62ef1aa3c05","first_seen":"2026-08-18T01:37:41.401416Z","last_seen":"2026-08-18T02:50:12.25564Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-22T02:50:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.94.22","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-14T22:11:56.940153Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"9c29d718419785022b347378791e4192.5qt6u.sbs","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-06-08T13:09:09.265192Z","last_seen":"2026-08-12T09:30:09.270618Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":573,"comment":"","tags":null,"fingerprints":null},{"fqdn":"whtahs.com","ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-17","domain_rank":0,"first_seen":"2026-08-18T01:37:37.475105Z","last_seen":"2026-08-18T01:37:37.475105Z","alert_count":44,"request_count":11,"received_data":584766,"sent_data":5075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a4389d2fb81b0c13728cbeb4dbde294","sha1":"a1d5a77be03d0ba85ce267732a87cddad56a150b","sha256":"e01d18e732a17074e9e171b1a9a2450849820475e63b57884ee6d5efa37ccf0c","sha512":"51beb47c550837378ce90d1bfcf7d9e32edeb0845146966adc55bd3a6caa30abd3fb8e0db0bb6f039894df052569f53612e9f066907d39d6fe85b8b48495fc4b","ssdeep":"","tlshash":"c0e0c083a0bf3a4c0220811a304ac0076bbe08b2ef864d610c9c3ba5cef9f4fc56d859","size":356,"data":"","first_seen":"2025-04-11T12:06:40.284619Z","last_seen":"2026-08-18T02:50:12.26653Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68ce5fe1ef5c53431b9d14c1b5d67b5c","sha1":"2eeb5eb293ad966f87cfd461add4d0293f1af19e","sha256":"a7beda99d677496484d125d24b618ce33e5130bde3badb375996f597358346d0","sha512":"d14be252f3a75e58965b96bec8020dc4438212ea9090a205b34756ce3b5bb9e69f76fe767930e4164f99c59a4c822653e3c82534251df9539bbf91cbd105221d","ssdeep":"","tlshash":"fe318a1183b6f679c2c930eabe5bcc66423a0c19b6f6e7dc9907dc40a944436f614ae7","size":1721,"data":"","first_seen":"2026-05-19T13:26:54.92746Z","last_seen":"2026-08-18T02:50:12.267031Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/index-CzptWdxJ.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c179e69c2012eb253131591c9c3a14c8","sha1":"49c71333da9d5e17ec75ce30381698e06330b3bf","sha256":"e964eee47020dc074fb6e51fcc768b4fa4caa6984a6d3cd84d0c207a794bdff7","sha512":"c1c3384ae6a081c43602cdc50870f17ea61042d71eb40bf04d16b873e9ac280735f4ddddfc02692b1590a444119d3f59c0f52f6b3825864b2949c2a434a128d5","ssdeep":"1536:t4BolWaUs97SKfNGMvuLH6ahdzpi17BZEnsLeiXeTgT+R:auWo7S8NGMQdzpgBepXgT+R","tlshash":"69a318d93282703383ea19e6903f1214b23a1e54784ad4d4f12d9de63d3799a92fbf5c","size":106211,"data":"","first_seen":"2026-08-18T01:37:41.405503Z","last_seen":"2026-08-18T02:50:12.262539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/pages-front-front.BnyZ709n.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b871a063135b6df172c637d7d1fbbc69","sha1":"0546eb51ff639e0eb27b694da90d1f57f4ae97ce","sha256":"726736c1007f883ff75d43330e17e9961b64b4639ca04f1b046e55ce011298a5","sha512":"7c85eabc0d2038785c05224848d1315665f5bbf26699604ef29634225bef2ee345ec73995883a2b236f0bf90c433212b749575a61454eedd65e357a69b965dcd","ssdeep":"96:xRRPY+84RC1nEMVxWiblm/Sv1d+zWZQ/ypl08Gce4qqkMMrjKc4qqBTBBQLG:xTPF8zVxWIlmk1d+6ZQ/S68GvfqvCKcO","tlshash":"94c16484c92ee33c85ab00258f09646571386fe8f18a8522b6bc4851bf94dfd7f087bc","size":5692,"data":"","first_seen":"2026-08-18T01:37:41.407196Z","last_seen":"2026-08-18T02:50:12.263324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-18T02:50:12.264585Z","times_seen":1813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/Kd-kDNOC.CHo0SOIm.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"615a405a520f0718131950b1e6d231b8","sha1":"5a6606851f7c4053dfbfbb1c938cddf3f08d6aad","sha256":"a19b4d8a7be977477d34b00fc7b75dbad2a8194a1ec4fdc1f6bd5428e234054a","sha512":"4a28e2d5a7455dddb936529bd57dc722073d71e6bd23bf91e58afab5de21d31f5603cfc984530af8196f03775df53f62f595dfe3274a8b5d5511e93d41546cf7","ssdeep":"","tlshash":"ba31997c9690a79d7df9c93f4b13b825b00532dae827192defa60050c1964f9f2dc0ad","size":1522,"data":"","first_seen":"2026-08-18T01:37:41.411438Z","last_seen":"2026-08-18T02:50:12.263928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/vendor.B85RuNAT.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9875798465e573fb3fd2a80211cbdf4e","sha1":"9e4ba19a953de5e5ceb4a4810d8e53c6df808f6b","sha256":"56595436b06805e00ec1b5749592d22155272b46197781cb6d5a7cdb3c2777cb","sha512":"f527638160d31fa34acedddaffddfa2d8398069b79e6a8b99270c7154938855dcbb8897d872fd0880e5b6cc77b19dc7f772920a303c06158cf45cec819875a37","ssdeep":"768:Dm8ugkr0a4JIc9Y2d7OuIPo4vfWI0KBENd/UsfWGb3mCAZWiEUm4roLFEfnc8R0e:PugMYOfuzJc1Gwu1LC2fO+4F8MZO2C2","tlshash":"057307e93282b53223fa19f7007b0005f339191a384ed4d8b16daddb7db745990abe6d","size":74649,"data":"","first_seen":"2026-08-18T01:37:41.410039Z","last_seen":"2026-08-18T02:50:12.259453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"App Launch","filename":"https://whtahs.com/assets/index-CzptWdxJ.js","line_number":7,"column_number":103898},{"level":"log","text":"App Show","filename":"https://whtahs.com/assets/index-CzptWdxJ.js","line_number":7,"column_number":103962},{"level":"log","text":"访问统计已记录map[actor:server1.conn0.watcher17.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:0 writable:true] msg:map[configurable:true enumerable:true value:访问记录成功 writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://whtahs.com/assets/index-CzptWdxJ.js","line_number":7,"column_number":104132}]},"http":[{"url":{"schema":"https","addr":"9c29d718419785022b347378791e4192.5qt6u.sbs:8001/apple-touch-icon.png","fqdn":"9c29d718419785022b347378791e4192.5qt6u.sbs","domain":"5qt6u.sbs","tld":"sbs"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:45.235Z","timestamp":1787021385235,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: 9c29d718419785022b347378791e4192.5qt6u.sbs:8001\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T05:37:27.332536Z","times_seen":17950175,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-18T02:49:43.899Z","timestamp":1787021383899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Q6OelgySf5wRg%2FPE5K1VLKK66hRmY4LGJvNI0gtUbRbpmFaB4H%2Fb9AwjIgbEhAAawdSgHWQ6amgTxgHitdIGoDm4yCat%2FFudy%2BaTfVpgBE%2BgX76Gfgrtpzmyyzr\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2cd9b618b0449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3395,"size_decoded":2103,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1746)","md5":"e7680b66462e20cbe511c606028fa838","sha1":"1f769aff6e338d223e9ac26c66719204957f9975","sha256":"2bc5321b85bfe2c83a80ac69a5b89dfe8639d7b41ef0619b8c02d50681fe87e8","sha512":"55d464122e7fad52cb8ace22bbfdbc368a13de28751a1bd4bc27dbded4489927a39b530bc80abc26c64cb4b47658502e52a007b14077275b2cec76ad308cbe2a","ssdeep":"","tlshash":"6261d7024260ff6e436871ad7547cc6d42370c24f1e9ebe4a447ac91acc4966f61a6f7","first_seen":"2026-08-18T01:37:41.404519Z","last_seen":"2026-08-18T02:50:12.257846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":0,"dns":7,"connect":14,"send":0,"wait":644,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/uni.335fb27a.css","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.760Z","timestamp":1787021384760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/uni.335fb27a.css HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-1be2\"\r\nexpires: Tue, 18 Aug 2026 13:37:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4360\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdAWsZzbUnZHv4JC%2FHYoqAnhJf3w9IyKo0IPFcp%2FowbbOCDhOpQJ35TLUjVTkvKhlNYGEESc8p2%2FHghi4DhDrm31gWcc57iBLyx%2FqA0UaKT83zUEKInEOjrlqZV9\"}]}\r\ncf-ray: a2cd9b66bb3949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7138,"size_decoded":2677,"mime_type":"text/css","magic":"ASCII text, with very long lines (7137)","md5":"9d8251c745f572f59f16a96cb4495220","sha1":"6fdf41c7291e06fa4cbb215cd0a58290c7337c26","sha256":"335fb27a16232643cbcf13dad686349cd57f2e4215ceca81243d642a4631ec20","sha512":"7b6d377a42cb1cbb72e7d356f983914782e42ec359c191319eadfdf71071f7ac2e10966c435d498f194044c96808052b912e2d959220c3414ef085c2d08bc3bc","ssdeep":"96:Ubf2Vi8Lg7J0CQLnDSL9zNXVAG5SqtmDyPFhZKw3:Ujj8LGJ0CQLnWL9BXVA8NEDyPhd","tlshash":"39e16471e940132db51bcf2e12e1db8f312245b2dc523b29bf6634b44fa91c6693a786","first_seen":"2026-08-18T01:37:41.412332Z","last_seen":"2026-08-18T02:50:12.258579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/vendor.B85RuNAT.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.764Z","timestamp":1787021384764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/vendor.B85RuNAT.js HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-12399\"\r\nexpires: Tue, 18 Aug 2026 13:37:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4360\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0fYi4hLly6kH7GCSBe2nehWIcH1hSqDmbGAxO7AGv9Uoa9NwqrcXM%2FMji2bRVQmlBcVjNW9WauMmbCwx5kSq0B%2Bx4wrMrC48N%2BEfMfxEu7ZOA0oA72bXruYr5QB\"}]}\r\ncf-ray: a2cd9b66cb3b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74649,"size_decoded":33026,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36160)","md5":"9875798465e573fb3fd2a80211cbdf4e","sha1":"9e4ba19a953de5e5ceb4a4810d8e53c6df808f6b","sha256":"56595436b06805e00ec1b5749592d22155272b46197781cb6d5a7cdb3c2777cb","sha512":"f527638160d31fa34acedddaffddfa2d8398069b79e6a8b99270c7154938855dcbb8897d872fd0880e5b6cc77b19dc7f772920a303c06158cf45cec819875a37","ssdeep":"768:Dm8ugkr0a4JIc9Y2d7OuIPo4vfWI0KBENd/UsfWGb3mCAZWiEUm4roLFEfnc8R0e:PugMYOfuzJc1Gwu1LC2fO+4F8MZO2C2","tlshash":"057307e93282b53223fa19f7007b0005f339191a384ed4d8b16daddb7db745990abe6d","first_seen":"2026-08-18T01:37:41.410039Z","last_seen":"2026-08-18T02:50:12.259453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/index-DvCtDHFt.css","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.766Z","timestamp":1787021384766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/index-DvCtDHFt.css HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-5b208\"\r\nexpires: Tue, 18 Aug 2026 13:37:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4360\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1%2BcP2uz8M2FkR0E6hx1QLy2tC3QTbxq5pkRREJlDZtNG7lXCIU3QuRGO5Rd9pwOUgJAOhweifeBCljXFSPElMDHRd2Wt8YavplSwdbv87ja%2F4A2LIrp8j6O8bkN\"}]}\r\ncf-ray: a2cd9b66cb3c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373256,"size_decoded":120493,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"05e35036c0032f66ef71df97f035fd6f","sha1":"506ebf67b92ed0d26d6643b77e266e9670125401","sha256":"e5b312a17a0dde926be2233fe693b5e3afccf57cc2f7c491182e1d40f9624a48","sha512":"61197dfe71689e3a4fee47f5eca617930bfc7e9d924d280d87e465ddc1134468a8db0e92ce99a4a3f8cc41f075cbdb5424d37266d21210844f612c1327b91acf","ssdeep":"3072:mbt9zAy7+X6RkROIlN72eQxGEPn1PRuUJeCJvOUnpzlcS7n:svI6RqMPn15uUTJvOUnp5Jn","tlshash":"1884f9f56286623d7f23d23780d1af7cb25c1d84f51aae67f8d1b0b8a985bdc1432624","first_seen":"2025-10-29T18:20:10.586197Z","last_seen":"2026-08-18T02:50:12.260522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/favicon.ico","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:45.236Z","timestamp":1787021385236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:45 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTj1%2BlVlSnhTCcXK%2FrqFU4yerQplkIrbK1FypzBmp6Mgg42AOZ3SLWp7CQG3k%2B3lcRGZZfOnW3OS9T%2FIpcM95Etp05sjDKMRjcu9p59kkB8FVh6nDj1g2QjW8UBQ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a2cd9b69bb7649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":696,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-18T03:13:32.33508Z","times_seen":319707,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.94.22","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:47.840Z","timestamp":1787021387840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 18 Aug 2026 02:49:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Tue, 18 Aug 2026 15:49:48 GMT\r\ncache-control: max-age=46800\r\nset-cookie: __uni__uid=rBACdmqDyEwH73EsBRFQAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACdmqDyEwH73EsBRFQAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACdmqDyEwH73EsBRFQAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-18T02:50:12.26191Z","times_seen":20276,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":0,"dns":3,"connect":210,"send":0,"wait":210,"receive":0,"ssl":426},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/index-CzptWdxJ.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.762Z","timestamp":1787021384762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/index-CzptWdxJ.js HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-19ee3\"\r\nexpires: Tue, 18 Aug 2026 13:37:04 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4360\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWko5h7JVD5RT8a7i%2Fzv2l12dtVF0BdSVPzTk8y%2BDGYyELbvLcmHdIjNwxPtVREGKuNPnuzQ9QB%2FFBuC1aQAwirNJN%2FZCoPMcx%2F5H8Q9ySuSHWa%2Fhrv4NaDcJ8A%2B\"}]}\r\ncf-ray: a2cd9b66bb3a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106211,"size_decoded":43876,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64742)","md5":"c179e69c2012eb253131591c9c3a14c8","sha1":"49c71333da9d5e17ec75ce30381698e06330b3bf","sha256":"e964eee47020dc074fb6e51fcc768b4fa4caa6984a6d3cd84d0c207a794bdff7","sha512":"c1c3384ae6a081c43602cdc50870f17ea61042d71eb40bf04d16b873e9ac280735f4ddddfc02692b1590a444119d3f59c0f52f6b3825864b2949c2a434a128d5","ssdeep":"1536:t4BolWaUs97SKfNGMvuLH6ahdzpi17BZEnsLeiXeTgT+R:auWo7S8NGMQdzpgBepXgT+R","tlshash":"69a318d93282703383ea19e6903f1214b23a1e54784ad4d4f12d9de63d3799a92fbf5c","first_seen":"2026-08-18T01:37:41.405503Z","last_seen":"2026-08-18T02:50:12.262539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/pages-front-front.BnyZ709n.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.867Z","timestamp":1787021384867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/pages-front-front.BnyZ709n.js HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-163c\"\r\nexpires: Tue, 18 Aug 2026 13:37:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4359\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fARzp3tXdGa1rqrrw0POZyS2OXmHHaKDNH4dxbxTmGitX%2FfACd6jcIhUZEXBrBsg9gruOcHJAnL1czJGkVBmvW8pdRGKze0LBwDh7bNZhbzUCGzZwgHIyf3bpWXZ\"}]}\r\ncf-ray: a2cd9b676b4c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5692,"size_decoded":3246,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5057)","md5":"b871a063135b6df172c637d7d1fbbc69","sha1":"0546eb51ff639e0eb27b694da90d1f57f4ae97ce","sha256":"726736c1007f883ff75d43330e17e9961b64b4639ca04f1b046e55ce011298a5","sha512":"7c85eabc0d2038785c05224848d1315665f5bbf26699604ef29634225bef2ee345ec73995883a2b236f0bf90c433212b749575a61454eedd65e357a69b965dcd","ssdeep":"96:xRRPY+84RC1nEMVxWiblm/Sv1d+zWZQ/ypl08Gce4qqkMMrjKc4qqBTBBQLG:xTPF8zVxWIlmk1d+6ZQ/S68GvfqvCKcO","tlshash":"94c16484c92ee33c85ab00258f09646571386fe8f18a8522b6bc4851bf94dfd7f087bc","first_seen":"2026-08-18T01:37:41.407196Z","last_seen":"2026-08-18T02:50:12.263324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/Kd-kDNOC.CHo0SOIm.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.869Z","timestamp":1787021384869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/Kd-kDNOC.CHo0SOIm.js HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-5f2\"\r\nexpires: Tue, 18 Aug 2026 13:37:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4359\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gx5AGhU9k3zKy6zo0urZVOHYddgMjhksVn5IuO8qoNgeCC%2B911FGWqDlm%2BdnXe6oE1js7RBcY5k8lils%2FGLddULe%2Fvflz30NBLUnoIlcweUYvgc%2FrPk0bTPk4lw8\"}]}\r\ncf-ray: a2cd9b676b4d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1522,"size_decoded":1476,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1521)","md5":"615a405a520f0718131950b1e6d231b8","sha1":"5a6606851f7c4053dfbfbb1c938cddf3f08d6aad","sha256":"a19b4d8a7be977477d34b00fc7b75dbad2a8194a1ec4fdc1f6bd5428e234054a","sha512":"4a28e2d5a7455dddb936529bd57dc722073d71e6bd23bf91e58afab5de21d31f5603cfc984530af8196f03775df53f62f595dfe3274a8b5d5511e93d41546cf7","ssdeep":"","tlshash":"ba31997c9690a79d7df9c93f4b13b825b00532dae827192defa60050c1964f9f2dc0ad","first_seen":"2026-08-18T01:37:41.411438Z","last_seen":"2026-08-18T02:50:12.263928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.871Z","timestamp":1787021384871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\netag: W/\"698ee364-5b\"\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 18 Aug 2026 13:37:05 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nn%2BCDbTzYdw7Dqi%2B4GEKgoUZddi4BI1qskZaQR4%2F%2F0kRfd7%2B5vL%2BOYo%2FSPGOxP75onCwLja2B6Adg%2FFFNsYSDCYDiA2ReQ%2Brn47Hx4Jt0nqJJdh7VbPWAg0YNx1i\"}]}\r\nage: 4359\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2cd9b676b4e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":827,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-08-18T02:50:12.264585Z","times_seen":1813,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/assets/front-DnSvGHEM.css","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.872Z","timestamp":1787021384872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"GET /assets/front-DnSvGHEM.css HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 13 Feb 2026 08:40:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698ee364-1292\"\r\nexpires: Tue, 18 Aug 2026 13:37:05 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 4359\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ng2StkU49WwGBCsPgVfJc32X%2BtDKFe%2FA4r5j0jbKeVEEQbuNcP%2B3ZIyAq1VJ9DG6yYWOYzFQVln7IZ%2BBL1XxKDm3Z0coFWTSWZzfhyTu8KPeEgAymR7suH3OOW7\"}]}\r\ncf-ray: a2cd9b676b4f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4754,"size_decoded":2163,"mime_type":"text/css","magic":"ASCII text, with very long lines (4753)","md5":"74d843ec33c98646b7261a49092df1b0","sha1":"ec60fa364b18d227154c86c836fdf474793d664a","sha256":"a09aec6c6a47e1d1f36ef1e5d54af88d35f039a17381d9fe6e7d2d2522a60ec0","sha512":"9fd9f6708f4b51ad26646393c417f57e4f51e2c8ba5d3a8f3d4145e065a787105444feb2b6ad81d24b8d1e1b674b1ec54fe66719b146cd02af7c0feb95b922ad","ssdeep":"48:Kue53cFImZJ8oYaTvydoa8o1uF9iv0u/PZPVlAs3VlglAxvi/KGT7PWamsFM/IfC:ve53n48sqdTdAF9+vnFxjmrfC","tlshash":"63a113a13dbc2828f177c6636ce1095e301af7b3c2e39b59da176314cca71632e61759","first_seen":"2026-08-18T01:37:41.408136Z","last_seen":"2026-08-18T02:50:12.265168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whtahs.com/wsapi/api/recordVisit","fqdn":"whtahs.com","domain":"whtahs.com","tld":"com"},"ip":{"addr":"104.21.41.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://whtahs.com/","date":"2026-08-18T02:49:44.875Z","timestamp":1787021384875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whtahs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 03:03:29 GMT","end":"Sun, 15 Nov 2026 04:02:09 GMT"},"fingerprint":{"sha1":"B5:8B:F5:90:7F:45:D4:56:14:71:76:2B:E4:E7:EE:5F:1A:07:2C:7E","sha256":"D0:50:58:B8:7F:24:E6:D4:58:A9:1E:05:D8:49:35:51:43:FC:BC:00:70:2F:07:F9:CB:34:83:48:09:01:39:8C"}}},"request":{"raw":"POST /wsapi/api/recordVisit HTTP/1.1\r\nHost: whtahs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 0\r\nOrigin: https://whtahs.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whtahs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 18 Aug 2026 02:49:45 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rk80ypgalOLrYmqJqqRGgwfj3JrHq86lYoHuG%2F%2BynuQLYXtvkr8J%2FbkGDGcFkQEBO3dxHY4SqrYO29SvEkLWlIkyHPYu2nzt2hCPF7LOHau1nBl%2FP811UPC9xoyR\"}]}\r\ncf-ray: a2cd9b677b5049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":760,"mime_type":"application/json","magic":"JSON text data","md5":"4bb924acd196bbecb867662a0f68632a","sha1":"465e2641f0b2629752e5ee62634abb85c1610c50","sha256":"bafbb7673661dc44f6869a5408e538dfc3d2a71fa27b16d314c3c640a1c6ccd3","sha512":"020047d736d648512bdc58e4cdcb1a9f8d2ff80cabc0bef313a396708ba55d19202951c0151e09388051815c5a1aae2b348b93922a7702ffd4947548b9dcb2bb","ssdeep":"","tlshash":"ca800454017c43c354474454351d354445151040ff30430f4c3d01dc1cf44470004040","first_seen":"2025-10-29T18:20:10.613135Z","last_seen":"2026-08-18T02:50:12.265873Z","times_seen":4,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-18","alert":"Phishing Block","trigger":"whtahs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-18","alert":"Sinkholed","trigger":"whtahs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}