{"report_id":"b320584d-5c4b-44d1-876c-778d849fe0fa","version":0,"status":"done","tags":[],"date":"2026-10-03T16:53:34Z","url":{"schema":"http","addr":"gbwhatsup.app/es/jtwhatsapp-apk","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"104.21.95.55","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"title":"Descargar JT WhatsApp (JTWhatsApp) 2026 Última Actualización V18","dom":{"size":256773,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25019)","md5":"dbe38512377ab3db080ac89719ab9c77","sha1":"cc7cae011fe99b1ed73296d774229398223bfec2","sha256":"13182b36a0d7eb50e387717dd511f1781e48a3047423bd53371d8e4e18c7ad53","sha512":"ee075e4b687b15ae7544a21dbe30cac32f52c801da9aa99204c4b4f7e97abe6a1b71a87bf3bd4b3e429d09f2a195e2177cbcf3ae7daa8a78a9a00c30f4f0dd15","ssdeep":"6144:FpUVcRH/pQg5Mmjx+qehFP01nckoPkIQZ4fG36wGbiIYL:FqV+H/pQg5Mmjx+qehFP01nckoPkIQ5L","tlshash":"3344f86113b4dcf935bba33a1e4de304a217a601ca8957e6f0b6d194628da590df3f0f","dom_hash":"domhashde39d5addfcd095722b14b6b7b7cee78","first_seen":"2026-10-02T23:05:05.848982Z","last_seen":"2026-10-03T16:53:38.062413Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gbwhatsup.app/es/jtwhatsapp-apk","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"104.21.95.55","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:53:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gbwhatsup.app","ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-03","domain_rank":1105014,"first_seen":"2025-01-06T21:59:59.789133Z","last_seen":"2026-10-02T23:05:05.128768Z","alert_count":32,"request_count":16,"received_data":873206,"sent_data":8426,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:23.7","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:23.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":3,"received_data":111479,"sent_data":1652,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/rocket-preload-links-js-extra","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdb901d9ad7f2a35fd4104b68b71a4ab","sha1":"2f5695f0bd4a4939335e8854fa2e7b5674a517ae","sha256":"10384592790956eb5290ce6f64009ecc3ea24db8fef95215c2ce823d2b40d81c","sha512":"5074f3059a57fc6887e71d253a9fdfd0585799dfdbff91dd543249ca95c4ea7245976daec2f4a8ccee38dcd2d9a64c1a931086fe0d69a05f5b958d64f4d8d6d5","ssdeep":"","tlshash":"8a21dcb2f28d0c5280165afa8f60c237bfdc8c08e8b7c915d109d588c01ef81d08f822","size":1181,"data":"","first_seen":"2026-08-17T08:12:30.3689Z","last_seen":"2026-10-03T16:53:38.080955Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce71388c2d441cfb9ef0985bc4e5bb71","sha1":"1e74c490ed76f671eb45ab0b45c9c9f5b9b89f0f","sha256":"efb5a648656ae8f944fbf74e5644126464160ab50197a288c8b587e74edd575a","sha512":"8ccd39ea8643980590cf71014ceee6bb774de11bc87aa162d3b1e48b0f6c392399186fabf147e0cbe9990950cf75e5517d78a357b01e6afbdb00472909db3a1d","ssdeep":"","tlshash":"89f0bef14158513f2ae2190a5412b2a63d7300baf3067080d46d9c605274ba9862afaa","size":476,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-10-03T21:42:15.83241Z","times_seen":49156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca4c81b0c05bce26d46c5c3213306418","sha1":"3db1a27e9cd6efea8d4da25b3dd0fff9388db1c5","sha256":"9642b76cf56f2a3f68764c35b5a8634a79836ab44d96567acfa032031b9080bd","sha512":"e870212eb29a20732615725aafb96c325a05b658e71d86e7392a9b77a83c6880ffb1f6f1a767c12dfe02a30945a95f05847d1391854819c209f785d7a3f5b24f","ssdeep":"192:PovBZROyP7zVHuYg/+ecb2SBO9xOImHnnIIzSBmqI/PvI2ILKpjMgmfxYaRAngF2:P8LluYIJSBFRHnBSBmqYHlyUjukngF2","tlshash":"ff32d7b9333a6ab42af1a2b25229f710f72011a66103405c752ddde2980cf9f3579ff6","size":11273,"data":"","first_seen":"2024-06-23T20:07:30Z","last_seen":"2026-10-03T16:53:38.082911Z","times_seen":3585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1cbb4bb9b150104ee43158932188e66a","sha1":"c4453ec98514cb68b558269476697411f28b6dc9","sha256":"e8417e4c744118911473ee11f94846f08a87e38b6aa383e61189e8f86aee7183","sha512":"cd640b20628e9ec4851cf0ab7133d832a51175eab5d0e3cf1e017db6c9bd8ac46c40bf53e6da1b0b36c42d9e197d380c8c2a3b19cb4cf6bac38a724ed820715e","ssdeep":"","tlshash":"79f0dcb2728d0c5240165ada8f60c237bfdc8c086877c915d109d588c01ef81d08f822","size":474,"data":"","first_seen":"2026-08-17T08:12:30.372354Z","last_seen":"2026-10-03T16:53:38.083563Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4987c278554aca0f434be960093da5ea","sha1":"a84e797c1bf51ba6880369c108139892b4ff222e","sha256":"0bb088a70492e66de65d971724f3e1ffc81e79d10b7baad3881f38d5e41d159e","sha512":"e09542491e372f328e06c8eeb6e5b9f06de1eadf4a76819313dfc6920e1fcb8d0642dfc89f4caadb4342488dd3b59ac09124901e8027f1e0edb72d506571d7bf","ssdeep":"","tlshash":"1131ced3326bc41ebcbb241323bf132e342079276f406463aee9c86644b9e83355769d","size":1794,"data":"","first_seen":"2023-03-07T01:29:13Z","last_seen":"2026-10-03T21:42:15.83968Z","times_seen":11588,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-10-03T21:39:03.46551Z","times_seen":77638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:53:01.977Z","timestamp":1791046381977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/jtwhatsapp-apk/ HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Oct 2026 16:12:14 GMT\r\ncache-control: max-age=0\r\nexpires: Sat, 03 Oct 2026 16:53:02 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDz%2FrLRIvOSczPiwRM0jbtFBFqTfDLb42qyvVTbvrLfuY75z%2Fxv1ooMMT7s9c1jyI6vBVCXgJiqph0Qr98TR29VIIuG7M9zjdcs5v2lQ4UHKUnfQIHGqqB9ClO7T1%2BIW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a44d75ef6ab3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:23.7","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:23.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]}],"data":{"size":256825,"size_decoded":46752,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24910), with CRLF, LF line terminators","md5":"df3ba1437bb6274bcc27ef18714e3331","sha1":"366020cbb0ba2171fc43aa8f3c81713b3aad34a8","sha256":"8f60d300648fab415249ee44e81aee8f51529c9c5595694dc1b44742958429c3","sha512":"ae6f86bcf293a3917d6bae270f500414b092a4cb11c87e4bd3b95cbbdb6de315a1e67c038c58001a277d2bd392621e8c24f9d11830200c4b223386fced94e086","ssdeep":"6144:JOVuiO6M/pQg5Mmjx+qehFP01nckoPkIQZyfG3Hwbu4Iq/:JPibM/pQg5Mmjx+qehFP01nckoPkIQHM","tlshash":"3144f86113b4dcf935bba33a1d4de304a217a601ca8957eaf0b6d194628da590df3f0f","first_seen":"2026-10-03T16:53:38.06728Z","last_seen":"2026-10-03T16:53:38.06728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/cache/min/1/es/wp-includes/css/dashicons.min.css?ver=1775753276","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.668Z","timestamp":1791046382668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/cache/min/1/es/wp-includes/css/dashicons.min.css?ver=1775753276 HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 16:47:56 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 02 Oct 2027 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nage: 64114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fk%2Fd4TSdaCVumLxd08WVYGJUdXQzWPv6XAIZx48nFU5lnkqcKP19ALyfEUHPnn3baX4MvVKJSnKnYVLXfkNHwmIrsilyCson%2BRt4%2F3CjqCGgXKCjIlvsMHSr4YVIkmFK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3ab6d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59106,"size_decoded":36548,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59071)","md5":"2697ccb4c6d703c9012ab1164116cdb2","sha1":"f8e612b1bf14a6cdd25088a917b5018ba74348c7","sha256":"e97f5584f61cff53572f29b543b09982f47dcb347aa63545cc2c80e09ddca894","sha512":"f860b8ca82d4818330bb0256db2dca4312abae8424f6b1c47c01a9fcbbcbfb4ce50892c483166fd5e208158e997b78e1777c9f1ffa34f6730f844d7bd77a5053","ssdeep":"768:Cey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs58Jq:Cx/ZvB/qPWMiquqioMUXQSJYIMW+8Jq","tlshash":"f543c2b1e64a40d677b0c843af65b26a5582bd3df8409ddaf40b821c1af3635069dfb8","first_seen":"2025-12-20T01:43:04.932405Z","last_seen":"2026-10-03T16:53:38.06855Z","times_seen":142,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.674Z","timestamp":1791046382674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/jtwhatsapp-apk/ HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Oct 2026 16:12:14 GMT\r\ncache-control: max-age=0\r\nexpires: Sat, 03 Oct 2026 16:53:03 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2BMux297TonlABGPm6C%2FZ6Zq5mnMjx%2FgBdBY5aaE5Xg7nZRkRoT92unpisvEypRiMK%2B%2FE9xnAEyBM3l9EXOaCcvlvMpS%2BzNE3sSNdcuaLSecNGpMVHwLK9h%2BY9DzS2Sx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a44d75f3bb70723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:23.7","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:23.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":256825,"size_decoded":46763,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24910), with CRLF, LF line terminators","md5":"df3ba1437bb6274bcc27ef18714e3331","sha1":"366020cbb0ba2171fc43aa8f3c81713b3aad34a8","sha256":"8f60d300648fab415249ee44e81aee8f51529c9c5595694dc1b44742958429c3","sha512":"ae6f86bcf293a3917d6bae270f500414b092a4cb11c87e4bd3b95cbbdb6de315a1e67c038c58001a277d2bd392621e8c24f9d11830200c4b223386fced94e086","ssdeep":"6144:JOVuiO6M/pQg5Mmjx+qehFP01nckoPkIQZyfG3Hwbu4Iq/:JPibM/pQg5Mmjx+qehFP01nckoPkIQHM","tlshash":"3144f86113b4dcf935bba33a1d4de304a217a601ca8957eaf0b6d194628da590df3f0f","first_seen":"2026-10-03T16:53:38.06728Z","last_seen":"2026-10-03T16:53:38.06728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/uploads/logo_GBWhatsApp.webp","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.712Z","timestamp":1791046382712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/uploads/logo_GBWhatsApp.webp HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 13:04:01 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:28 GMT\r\nvary: Accept-Encoding\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDwuEdyVqVrb8wEASyT%2BIkjW7X4Bj6Prq9k7m5g2K8eAsU89t9%2BHzh5oQvO0gKNkAe8YDXu6qXVx10XjvqnI9yBaX5wWx1VjLvRmGSgM8uTdD1Pa8KRiSdWGqeklxNMh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3fb7f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2888\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2888,"size_decoded":3623,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"686de471a065f96fe59960744095a149","sha1":"df691d1fbe59d1ba955efab5cfd51987d6daab2c","sha256":"f00a5a9122dc508214eda23d86b93801a941a679a7fac7d258d3f3f472179a87","sha512":"6c4b2a9018b0cd218847ca9f2fb5dfca69a02956ea7b0c2c9640a1bcd3e997a0261b74fbf98714132acab116f6e160bb4530a6101dc24b58cde47aae07eb50cd","ssdeep":"","tlshash":"0a51d8685c7212f2a94eb7014dfc6c98c2178156cdc0a0cbe5e1dd631d952d09afb697","first_seen":"2026-08-17T08:12:30.361238Z","last_seen":"2026-10-03T16:53:38.069229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UNirkOUuhp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.143Z","timestamp":1791046383143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v20/mem5YaGs126MiZpBA-UNirkOUuhp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gbwhatsup.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14956\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 17:47:04 GMT\r\nexpires: Tue, 28 Sep 2027 17:47:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 428759\r\nlast-modified: Tue, 18 May 2021 21:21:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14956,"size_decoded":15769,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14956, version 1.0","md5":"4334c2753ff9f057d9de926e66882c9e","sha1":"36352b82f41b8de16636e5dee0c52cc70ef56080","sha256":"c298433cc9eb86f4c0be0a447b0faf398dee9186d2bcf26683297de2758cddc7","sha512":"31a49bbb18890fd63ba799dcde2da6e5ef65cf6bd3a34a8814924c76a2226177e387db2d82175b192e4ae28cd6d12e0e7d01b3ba2f22f52318561022acd4eed1","ssdeep":"384:JGTGE3FuVj1kxQnQBMRIzJfeU7y99uV55US1ZhCJZo4mCEloO:0TG5bnMughy99C5US1Zp4m5oO","tlshash":"ca62c07777727603f8c7927317b9065b24749e43a8ed33281cce610a6423b1eee45d44","first_seen":"2023-04-09T08:26:31Z","last_seen":"2026-10-03T16:53:38.071013Z","times_seen":1645,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/themes/appyn/images/star.svg","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.750Z","timestamp":1791046382750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/themes/appyn/images/star.svg HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/wp-content/themes/appyn/style.min.css?ver=2.0.15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 16:33:20 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:29 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\ncontent-type: image/svg+xml\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndyqB07Vu8rsfa5ZFRk0bEubbL2qLT53lTPkT6IIHCQdTceYPjlsdsxwCkNSkbjAJ%2FdXT6uBSgtITK1IO7hdeA6E9oTgzvtIwUW8LSSvlJakKM%2FsdR5pIOBvRUg3xi0T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f43b92723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 317\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":473,"size_decoded":1086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53e1150db597cdd6a7e8a5a1d4799be2","sha1":"8e5c715a984739f139741a95d582ec901d553657","sha256":"6c6da64434dad25531048fc79e39791166ec3d3413593b9718622ff95eff9db4","sha512":"6cfc89d4abe8407e203f994ea13bf997e479b006942c6c2ac0132f24cbb69005dd8f8c814a8fe8df67e13bfd44b6f4a5d94321fffd6965e8060306b537172a04","ssdeep":"","tlshash":"02f0dc1a430e0d709e4283b13e7cb0b8fc8784de38ec0794c50380122040aa120e3dc9","first_seen":"2023-07-03T15:48:11Z","last_seen":"2026-10-03T16:53:38.071564Z","times_seen":620,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v20/mem8YaGs126MiZpBA-UFVZ0b.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.138Z","timestamp":1791046383138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v20/mem8YaGs126MiZpBA-UFVZ0b.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gbwhatsup.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 78972\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:09:32 GMT\r\nexpires: Tue, 28 Sep 2027 16:09:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434611\r\nlast-modified: Tue, 27 Jul 2021 16:27:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78972,"size_decoded":79785,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78972, version 1.0","md5":"97d61470a7ead61a027990e86b8042ce","sha1":"5153316ff4c573cd4e8c236a01c71742f5fd0544","sha256":"9c702801fa3fee8f55c6dd59c5ed20c4277a439e8410e99cc883231a16863910","sha512":"dd97ed528bb1f3803b90f8ae9dab9d8ba98d894acc95294ed8a00908a99b3bc54685328011145ac1c75461f219897db58130c9dc3f8545bfe4074717fed156c3","ssdeep":"1536:NSSeBJ46tBrt+1lAlcBDPlkPwrE5J4r7H/da8lb54yP8VhBuD+Re:NM46jrt+M9wrWJ47H1a8lt4yEVhBrRe","tlshash":"6b73120f992422d246e0cfed1cf152cc8a616db2faa27dc983d0d095b65477ef9b5388","first_seen":"2023-05-05T03:32:30Z","last_seen":"2026-10-03T16:53:38.072585Z","times_seen":974,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/uploads/Descargar_JT_WhatsApp.webp","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.153Z","timestamp":1791046383153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/uploads/Descargar_JT_WhatsApp.webp HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 16:59:49 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:29 GMT\r\nvary: Accept-Encoding\r\npriority: u=3,i\r\ncontent-type: image/webp\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9j5EQV5tNBqB8gf4u3UBwHQDwvIhNJflrEK2cWiva2vA28pSbhFCOmMyXy7XP%2BISqupK6kkwYmnqCMNE5n2G87t0MV7uFnqH6Ng1uJRQftoDpnmjedo7NdXEVQjjF%2Bf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f6bc51723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6986,"size_decoded":7721,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37962b3db9e699b4b625d7247be07d9f","sha1":"72a9c4c483ecd84b96fe979c28db7002350aa035","sha256":"22c0db1c0b6e086fda54d0fa3e1ee966efe38ca7420e5c14221322ade44031b5","sha512":"0cf073894f51f5e9ad9d21d5e0323db33e89a61080d36947eb4d6581170cebedf2a388407bbf29f50ad5965b5859f70da6260aa012ab60b6ee665a5d5a563e1f","ssdeep":"192:C5tZ3zUYT7sXoQ7S993aqby5q+tv5631yH8GChU:C5tZgszQO8Tla4cGCG","tlshash":"dce17d5d12a8cc7ee8e884941e7be3e1d2a6547606c6c82b23cf9f93059904f91c53f0","first_seen":"2026-08-17T08:12:30.354069Z","last_seen":"2026-10-03T16:53:38.073781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/themes/appyn/assets/js/js.min.js?ver=2.0.15","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.661Z","timestamp":1791046382661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/themes/appyn/assets/js/js.min.js?ver=2.0.15 HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 16:33:20 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 01 Nov 2026 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EM54PU0lnr5DPeR8RhS23l5POAhimynBaU%2F6fkyyZ%2FkVXU46PHsGVvgubvM3s2tB9i2u7Y2wlRKJiBfe7VvgjaXaxv0gh%2BeoU7fyckIQpR1RjO4xLnGYSjW2YpdX3sXm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3ab69723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":18477,"size_decoded":5811,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18477), with no line terminators","md5":"365e9b05833812b7dcae26373fbaaefe","sha1":"dc216bf08943509e97641b708936c79d91abee47","sha256":"1a05fb8f2bc2978462c1d617ddcfe8de898c379a13a7a49171834a3cdf77b1db","sha512":"3a45c0bd09bbffd723948c7a457f6b7d0f356eb7280b788493c3fef186b2fef8224c3e24721578f3917436df47b8fe87a424525b089e6b21e23ae2f2e77bdbd3","ssdeep":"384:Yvf4xzL1bFFPWuGcEIEOqcxx3anCMzMLgfyLOd6aaBM/euL5nwEjhpyonUiwFzIp:YvANj1WuuZSFk5nwEjhpyonDczKPd","tlshash":"6782b718321864bd45bf177d211f920672391d3acb06984674bec4799fbed8a02f6f2e","first_seen":"2024-05-24T09:39:22Z","last_seen":"2026-10-03T16:53:38.074286Z","times_seen":466,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/cache/min/1/wp-includes/css/dashicons.min.css?ver=1775753276","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.662Z","timestamp":1791046382662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/cache/min/1/wp-includes/css/dashicons.min.css?ver=1775753276 HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 16:47:56 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 02 Oct 2027 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=0,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nage: 64114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWIzMdLQpOrISPi3CqluIXJvUQjcHvFAoEuHweJ9klHGObR3lJpBtK9jKKOkzojzEYCI0f2XSruz7eVZFiZ5qBMy0gD5eCgH5rwSm5ahw3UWWNCWvnmbxFAMTlLv2nvJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3ab6a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59106,"size_decoded":36540,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59071)","md5":"2697ccb4c6d703c9012ab1164116cdb2","sha1":"f8e612b1bf14a6cdd25088a917b5018ba74348c7","sha256":"e97f5584f61cff53572f29b543b09982f47dcb347aa63545cc2c80e09ddca894","sha512":"f860b8ca82d4818330bb0256db2dca4312abae8424f6b1c47c01a9fcbbcbfb4ce50892c483166fd5e208158e997b78e1777c9f1ffa34f6730f844d7bd77a5053","ssdeep":"768:Cey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs58Jq:Cx/ZvB/qPWMiquqioMUXQSJYIMW+8Jq","tlshash":"f543c2b1e64a40d677b0c843af65b26a5582bd3df8409ddaf40b821c1af3635069dfb8","first_seen":"2025-12-20T01:43:04.932405Z","last_seen":"2026-10-03T16:53:38.06855Z","times_seen":142,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk/","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.683Z","timestamp":1791046382683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/jtwhatsapp-apk/ HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Oct 2026 16:12:14 GMT\r\ncache-control: max-age=0\r\nexpires: Sat, 03 Oct 2026 16:53:03 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNTZlaiXuZRNm4EIq9AVSTLrlGM1FLcMbKFOAVCXcHQ2f%2Fpcve9%2BhqqItyXOHWcKER6G1siSiJlhKuIBEZP3A2JgxOvTszJwADtdGvMNS8itbY%2BkjEzG%2BYP2iOkfeXlM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a44d75f3cb75723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:23.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:23.7","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32316,"size_decoded":9266,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11811), with CRLF, LF line terminators","md5":"985a3f6c22de2ceb4916d364b68ebed1","sha1":"d5c5b94c157d7b49a67c4438cc1973997a8a2e7e","sha256":"46b8fd10d3884dd448bbcec08515284858f6be3952843d4ed187c730149015fe","sha512":"b7c7e56db0558bdf1d91917f8ab65f29b709619977f3d13b156613ac21e054d0aaec50db45109bbe35a7aaffbeeed6abf5cabb486f26fa22524df74e0bb010cb","ssdeep":"768:D8Ll7IJSBFpnBSBVYHlyUjNngF7SVsyZXLGA8KlA8Oy8YpA8kRu+STfFyBE9ZdyQ:gOQKxOVsKXLGA8KlA8Oy8YpA8Gu+SLc+","tlshash":"96e2fb72221b6934ab63b66331ddb3119421503764d2806af32d8cdd4ddae7b23b9b3d","first_seen":"2026-10-03T16:53:38.074654Z","last_seen":"2026-10-03T16:53:38.074654Z","times_seen":1,"resource_available":true,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v20/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.141Z","timestamp":1791046383141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/opensans/v20/mem5YaGs126MiZpBA-UN7rgOUuhp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gbwhatsup.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15112\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 06:38:27 GMT\r\nexpires: Sat, 02 Oct 2027 06:38:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 123276\r\nlast-modified: Tue, 18 May 2021 21:21:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15112,"size_decoded":15925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15112, version 1.0","md5":"b596676fc00af9806c16a12e9a0350f8","sha1":"056bafe30541a1926905966fa58b0df058504e36","sha256":"c73575543a5c99018f842960f9882edaa0918965ea856e91de9717a0d58d3f1c","sha512":"0666192a4a370bc14e8c525996ce65d576cc5df3b8cc8692ca2b90b357cbf0e6dc04251de37f0a891bc958be1a354c274a40e32d20931367b45e234de955e070","ssdeep":"192:E2qLG2Cf1KdIIeylMP8QyhVaNwtx9bWKtfebW/9XuKFD0aVBJODEd3762B:sLzCf1QeyGP8QcVazb6/R4iBhn","tlshash":"c662c0e77a8e8285f941fbf09d1817afeec725817936b846cc89ae1ce040493e2c8545","first_seen":"2023-04-07T23:55:09Z","last_seen":"2026-10-03T16:53:38.075635Z","times_seen":1949,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/uploads/Fav_GB_WhatsApp-300x300.webp","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.341Z","timestamp":1791046383341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/uploads/Fav_GB_WhatsApp-300x300.webp HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Nov 2024 16:59:27 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:29 GMT\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/webp\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J60ljQbIYk6ocDXkOU0mvSoDssLMAYhntDWbkfJomrmk8ZubM33JF5uQmAkHggIKvdBTeA%2F4k73e0Ka9NZ5SoWSy8VYJfSNQtJMFsv6TQ5JIDB43EiW32%2F6Ymc4WkTBD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f7ec99723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11384,"size_decoded":12123,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"524c3bf7cf175021709b41f713133a76","sha1":"11944f554dc3a61e01a21fcad56e2655aa010ad8","sha256":"56e2774bab9eeb70ef0e511d09036336a8544a38ead2b3c7b891f44b51d22ed5","sha512":"e387d3daa473ad08c41f6ef231c76a1482a80e8c699a9f81a49c9676bc1814a806850245c7abf685e0cf1404cdb358279c3cf82856549ae903e4a6e8b02b7631","ssdeep":"192:PCdw6M/R3QaXRxtTp6Xt3NwT966qqcoKWdNXr2druK8mYdqstgaqD7+:SKRgaLw3wTM6qqvKuNXr4hUYP+","tlshash":"4032b0b77290f0156656fb82e08109550131c317bd8dff57a13d9a872f33f058a9a9b9","first_seen":"2026-08-17T08:12:30.366027Z","last_seen":"2026-10-03T16:53:38.076179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/jtwhatsapp-apk","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:53:00.829Z","timestamp":1791046380829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/jtwhatsapp-apk HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Sat, 03 Oct 2026 16:53:01 GMT\r\nserver: cloudflare\r\nx-redirect-by: WordPress\r\nlocation: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\ncache-control: max-age=0\r\nexpires: Sat, 03 Oct 2026 16:53:01 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7O7zNxG%2FM0LEWUirP0LXnxu7Wlg0DCP8oTOSgRAL%2FCP3Z59UviaBQOhT9RUvVWP6nw6sra2AjVXRH%2FdFFGUGECIbuU4xCDvpGQIwkS6L79xT2FgfArEagVb7s%2BxxVXV\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75e85959723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-03T22:32:38.387112Z","times_seen":18809506,"resource_available":true,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":1113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/themes/appyn/style.min.css?ver=2.0.15","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.664Z","timestamp":1791046382664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/themes/appyn/style.min.css?ver=2.0.15 HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 16:33:20 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 02 Oct 2027 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=0,i=?0\r\ncontent-type: text/css; charset=utf-8\r\nage: 64114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IX0ICNsC2EXbL2g40AVgrHS8aZ42kEHl4yHYTHoeiwLqQkIhQo8FRSx%2FEBJxH4xMsrwe92CG3UN1ozfjAd3VtTjc5qDcEaPmUGxitffAzYIDKbb7GIpy7hLemhydolYu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3ab6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53181,"size_decoded":12940,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52957), with CRLF line terminators","md5":"f3e078e76d74d37e61378426982e45d7","sha1":"5fa6beb2f8d5a51403eba85ca93d5176bd3d179b","sha256":"d8196e72d37ed18b66466ccc15750f522a1bcdfc61ee1cdc7ddcc8fbb2d6f2ad","sha512":"76155ebef2e39aff09dcf93c8e7556dcbb15a5b84ee4dde0d4636c325c012fc02a59bcef388e9a0f096241be71e21a3757875b58013f96b68c60da02cb6f129a","ssdeep":"768:WKeUBIBQlplrvYebx06dCs+Lf6si6f7qwp+WOMBA3UUCrvF:s4vlpZhbij/zqwp+aA3UdrvF","tlshash":"a333932156d531acf437e276f9d16bc871344127e6230bfeea3ab179caca0950633a4d","first_seen":"2024-05-24T09:39:22Z","last_seen":"2026-10-03T16:53:38.077677Z","times_seen":265,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/wp-includes/js/jquery/jquery.min.js","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.670Z","timestamp":1791046382670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Apr 2024 21:59:23 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 01 Nov 2026 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\nage: 64114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlO%2B%2Frt2pu4qq%2F%2BoPiw%2BXE7SuJTPevOXdibNfnM2Lu3ybIF9HCb1NZJtcCfv32qA1%2FcCYU%2Fbv3Y4P3CtYo8beVhYDgyu%2BDpABhSj95Eh15tgvuezN5%2BBasIXNPSsDVbc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3bb6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31172,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-03T22:33:19.275732Z","times_seen":1081221,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/uploads/Descargar_JT_WhatsApp-150x150.webp","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.677Z","timestamp":1791046382677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/uploads/Descargar_JT_WhatsApp-150x150.webp HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Dec 2024 16:59:49 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:28 GMT\r\nvary: Accept-Encoding\r\npriority: u=5,i\r\ncontent-type: image/webp\r\nage: 64114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy7%2BfwZWwGgKbyvR0xhsi4sTo3PYXugjwwm6eR7%2F8qcXTamnHl9clWLyGxw7%2FEGkX16hpKI2Wa0SBMgv873LxxeULOFV1sIPvhxpvkmDauzSE%2BFlrHRuI4fraMf%2FzG6E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3bb72723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4396,"size_decoded":5137,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0cb8bde752ad7fa62e6de236b73a1bc","sha1":"1f4fe7de4326f85026d866261b880ccfc96e69d9","sha256":"a41c8dc2a84f843b2352415bf3097f5bad428527f87149812803a13f59b09c73","sha512":"9442027c4449ef87e9c7a2f78e83d7aa2a9486d12efd2af83efafc284fd059b113176f7530cdcdb4610815416221146b628182c1f74282ab3208b684030e99f7","ssdeep":"96:wlEJc/T/CxWmOsVLI6DDexR6IrftHx7TffFsYNqgo:LJc/TkjL9DORVR7TffFlg","tlshash":"5f918d10bfa5d87a42df6d2160f0ef69a9e05ebde2517d01bb8be01855e073a46340d8","first_seen":"2026-08-17T08:12:30.333947Z","last_seen":"2026-10-03T16:53:38.078647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:02.715Z","timestamp":1791046382715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:02 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 13 Nov 2024 16:33:04 GMT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2678400\r\nexpires: Sun, 01 Nov 2026 23:04:28 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript; charset=utf-8\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYuYzYQl3TFpo69lIGFPVmTPq9pOWVnR7Mgr3IAsgVwNWuIclauan5ipLsaCWFdoqNEobnyusuxXAaCeRo8tCgpcFrIN3Riznohc3bZhObjGgPw0%2B8YVHxt1pB9Are4e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f3fb81723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3053\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8892,"size_decoded":3840,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-10-03T21:39:03.46551Z","times_seen":77638,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gbwhatsup.app/es/wp-content/uploads/Fav_GB_WhatsApp-75x75.webp","fqdn":"gbwhatsup.app","domain":"gbwhatsup.app","tld":"app"},"ip":{"addr":"172.67.143.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gbwhatsup.app/es/jtwhatsapp-apk/","date":"2026-10-03T16:53:03.343Z","timestamp":1791046383343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gbwhatsup.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 05:16:37 GMT","end":"Mon, 07 Dec 2026 06:14:09 GMT"},"fingerprint":{"sha1":"90:22:42:00:DF:11:97:7C:38:7D:8D:8C:0E:45:62:8F:A4:59:17:A3","sha256":"7E:7D:3E:92:02:FF:F3:1D:BE:A9:1E:56:93:2D:70:1F:5E:45:03:D8:24:19:50:C9:24:31:91:8F:07:2A:18:53"}}},"request":{"raw":"GET /es/wp-content/uploads/Fav_GB_WhatsApp-75x75.webp HTTP/1.1\r\nHost: gbwhatsup.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gbwhatsup.app/es/jtwhatsapp-apk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 03 Oct 2026 16:53:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 20 Nov 2024 16:59:27 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=10368000\r\nexpires: Sat, 30 Jan 2027 23:04:29 GMT\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/webp\r\nage: 64113\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2R3qfBEjHnXN3VpyBWm1Hb4t9%2Ff4iVCaNR2wpJgyefvsrl68G6q8FjMf3hdg9ucPPfXE9w790TMHNDYE6vW1yizb%2B3ezNRTIB9zdDE8u%2B2qw4tAV8yXicxyIJsvLftJt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d75f7ec9a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2720\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2720,"size_decoded":3460,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bacdb116bb314c65a3b219fdc82b81df","sha1":"c709d8d7a4fe3dc28ec6aefff889f94cf5605ea6","sha256":"16ce88f727bd97fa2cc2937f51e2c48ff8aa28ba2ec2996f2d0d1935a6e16e55","sha512":"7a9a12e47f85f8e5c63c1e9d0f8ebe348ebeffd64fabfc2a78be4eb7fe3b9bd22b6700b29989443a57f3cd41b8aea34e6f3253c0bca3215d2d93ed23bb2de614","ssdeep":"","tlshash":"7b5129a500b1c3aaf6b5957be100032d21235397c32a7db32f8cd26c427f9d796427a6","first_seen":"2026-08-17T08:12:30.357068Z","last_seen":"2026-10-03T16:53:38.07974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"gbwhatsup.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}