{"report_id":"cfde186e-c4f7-474c-8843-7e666819a926","version":6,"status":"done","tags":[],"date":"2026-02-04T16:15:02Z","url":{"schema":"http","addr":"contato-whatsapp-x2el03r.gamma.site","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"104.21.4.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"title":"Whatsapp","dom":{"size":224570,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65029)","md5":"0956f33b4893a12b2108c5ce1afe426e","sha1":"a6837a261ef1311c02e8c2f496b05121f0087f92","sha256":"17b77352cd69720b13b0931431af10b52e374c240b19ad0e3cf4bcb7cae2dc44","sha512":"3832852995ddd196adc48c92affac988def245be09ac48810a0f0ecd2e759153b781cea309022cf0a83598f7c04892760f3f2d9dec27e3f74059c1df62c5feb3","ssdeep":"6144:n7SAPgZjxm0H2GFEhP/3VLLsKldUK/i/T7z5xekNPS7v2zFprLhlIkmk:n7YZjxm0H2GFEhX3VLLsKldUK/i/T7zP","tlshash":"5424f9a9d221e5be5533ca0d26dc7a196638f842ce4047eff694816d46c7afa1307f0b","dom_hash":"domhashae5aca16cbbd6389ced77873a650bcba","first_seen":"2026-02-04T03:12:26.398998Z","last_seen":"2026-02-04T16:15:09.767103Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"contato-whatsapp-x2el03r.gamma.site","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"104.21.4.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T16:15:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-04","alert":"Hunting_JS_WebAssembly","trigger":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5962-78a759aeaefbd5fe.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"contato-whatsapp-x2el03r.gamma.site","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-09","domain_rank":0,"first_seen":"2026-02-04T03:12:22.71597Z","last_seen":"2026-02-04T03:12:22.71597Z","alert_count":176,"request_count":35,"received_data":7707293,"sent_data":17283,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}]},{"fqdn":"imgproxy.gamma.app","ip":{"addr":"104.18.11.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-11","domain_rank":762691,"first_seen":"2023-12-07T10:57:25Z","last_seen":"2026-01-31T05:56:31.65991Z","alert_count":0,"request_count":1,"received_data":51080,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":4,"received_data":172120,"sent_data":2312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":2436,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/framework-0ac6491e82269c86.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"750ff53125589744720af29f6a6ee485","sha1":"a8e2b86f77fbf34e7769efed03cdfac3ffdfc3c9","sha256":"659b25c04e45244601c3fd16aaab4aa8a25b18f915a08e8d2c83b402841ef710","sha512":"513bcd8552685638b6227b096ccd0c42b14e8c9277b2f5bdc6670deba9e8708814604850e7f1df31d0c8b6e77478d9f3ce6793d23a0ec120f2da3c323e8211a6","ssdeep":"1536:MEv1NH6ZMumPhxj3hnpR76oedCWyTDJqQ1:MEz3pp963dEr1","tlshash":"08d3f9e83995f6526ab311a700ef1803737d2a1b280c4960e215fd9e75b842bb17bfdd","size":141063,"data":"","first_seen":"2024-03-12T16:19:21Z","last_seen":"2026-05-09T10:00:35.454544Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/pages/_app-b447acfceb9a52b4.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e46348cf998f6d2290f89aa9be57d57","sha1":"2e31b811c3b2133c9323b4d6c9b5f856d86abf77","sha256":"51eb608279b0745de9203a5e125b962d36cfa2a7bc9c051913522be16065164d","sha512":"aaa45f1f9419e1acc143c730e706ec22936d35e5e7f4f87be8e672703ebcc0960e6ea30d5401cc49448e859d434ed30d364962fd40d2c6e848dcd91cf652d8af","ssdeep":"","tlshash":"f0e0269d39f2bc2c2a2324bc00bb090e36be2e8a78cc95d49251b8c43c3181ec611d8c","size":336,"data":"","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-05-09T10:00:35.428133Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/802SgFFHuD6M2O3lxgcWf/_buildManifest.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"271cf43b028a77a989e849796b95cc93","sha1":"32c00bd5ade48528370629a512f35244b5ad45f8","sha256":"6c82efec814a892bfd0ab09d3af1a65840ea99e74bb3e3b2cd2776da6d9f3bde","sha512":"a2093b4d8ffeff2c376090cad34c17fea7d1f16e29165d9e06c982687b4950cb15f3614f21a5c09990f5f1c41d43623f563c9f14d2e483b577bb0538a56776df","ssdeep":"96:/GI7bs8/lkDiIYV4qi+1Eckmc1n28bbuHkYwkrydtyvkS6:/GI/s8/lkeYqiQEckmiNycS6","tlshash":"3ed111435c24fb7a2a41f6ecf53e1f0e08a09a31e5768ac5abad8e5119f140f0356e77","size":6407,"data":"","first_seen":"2026-02-04T03:12:26.421199Z","last_seen":"2026-02-04T16:15:09.795179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/817.5046e0241819580f.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c969ac382cd7442bfcb067e0c8b08dd9","sha1":"5d7013153bac3ddce952a0993c9e35bd2cf6678e","sha256":"38324c676f2ca578a4b830b18788fe3676f6c8565fa587d02c9050af4d2ced46","sha512":"e36a49ae47f3602c4d1bee97999e7f776ff7e90fb074a761dd673144e06ec9b7f37118cfaba7ff630a3e7a2ed1a20ecf0e065270373275446d2e686440aaa866","ssdeep":"192:9/3GrooO0CfbMoMOmo8l4HNe7frsraAe/WQ75HoxFfagF7I:9/Grm0Cfb/MOZCKNe7frsraAe/V75Ho8","tlshash":"9df1964161e27cbd0bcf4be7b05f1545a22b960d688868acfea859d2dc70b06315ff78","size":7700,"data":"","first_seen":"2024-07-05T15:23:05Z","last_seen":"2026-02-04T16:15:09.791166Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/7413e8b9.b6405c2f1c174004.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3b3bcfb0d2f6aa7dd7dd907bed97e2a","sha1":"4d0b314081341f92a1294b024474186438ad327b","sha256":"cea039fbf6b021f768f230f5b3231f89dab96a883bef4c0dd173fe415244ca1f","sha512":"097ed3eeec0b1068032ba47077ea70856f890e69be055f0d8d39beddc49ed339631056537be0769adc35611ab784bdab1e24862df55a53e0cd6d1ffd7f6d87b3","ssdeep":"768:S+fad5jk3iBOVuKIb9z08YmmehpTakIw1p3SwAjip9GTVxrg8T65y381GEQmKL:u6y9g8qw2w1p3Sw2ip9kg8Tqy381G6KL","tlshash":"39736cbd7724612809af4be9e2bf481473bf251d1800465cb36d88f566949ecb09ffb8","size":76362,"data":"","first_seen":"2023-09-04T01:05:15Z","last_seen":"2026-02-04T16:15:09.814869Z","times_seen":203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/91bbf309-aaf9ef7a7a89dd3c.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc27350b2868a506730d605f9dcf688e","sha1":"b2e1683987a48a1fb90bf2d3512a608f06d3e45d","sha256":"1b3f34deacf964fb3bfae7e6d451c37cad9d38d8b7e15661d0680047155ef787","sha512":"ea8b92e3d9a3b87016a5797940e17b1a94e483ba84f083ec788879d2637e3b6e16b9b51116948137df6aed07694dce71c18a5edaf9504ca5c00858aed65a4209","ssdeep":"1536:7/AsMHFLE2SzHY4wqAE+TnQ6PK8AfhLiITGv+:7ozxE24HYlqhKqZR","tlshash":"234374653372e47287f856abc4718802f73ea5a65807153cfb2c7dce28a865761f9b30","size":59428,"data":"","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-05-09T10:00:35.440569Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/998ccc15-ad35dfdb33c695e6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc121d6c577087e084a5d4bacb0d726e","sha1":"870928832466b676778b09d114d14b2973c8f0d7","sha256":"f57052cac40c50c424f837a0ce6b262f4914b144fcc671518a722e68cfef55df","sha512":"f1f8e59a23b0c9770fb031056009c5600d1f517b275242264f56bfe93bab3a6feaa7a06f3c2e34857b28f8662c77884e880db85d838c56a8bbf441cb05ae84dc","ssdeep":"1536:RTFIJ8wN5kMcNTNWd4C1rTAdidTFEc+b1pk1K00q2mnv:RTF/y+lA48bdTEpV0X2k","tlshash":"5bd308c8b2e2707d96136968825f1706b13e3945300f8da5f676e4c62eb844ea17fe3d","size":141417,"data":"","first_seen":"2024-02-04T01:23:53Z","last_seen":"2026-05-09T10:00:35.421478Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/7045-cf5843618d309941.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0786a0236bfa5625a9d8b9910724953","sha1":"558cdc07f7ee4feca20ecd69c5353a55223c248a","sha256":"4e4795c8eafd4047e1794ce200154eb4262516b22ee186b14f6df7fa1023da94","sha512":"a11e1b7a77a16274d0329c8529e731847b6c9187e21f7097170b6eda66985caf2e9a118dafa44a71f3ef65b00ae1ad97249d733fb5b7c954fbb84291a612f957","ssdeep":"49152:2q4SXIO2k9TUW0tQ9mmGng+w3O7pVZNGonyXKVfJJNOt:2q4cvVGng+wcZN9JHw","tlshash":"66d55bc87282b06543e751b5807f010bf33e29696c0d8428f279d8da7cb995d52bbf7a","size":2793882,"data":"","first_seen":"2026-02-04T03:12:26.455387Z","last_seen":"2026-02-04T16:15:09.821959Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/webpack-88a6027fbe47d18d.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af8d77ca24048f1eaf5cb0c410d1177b","sha1":"947bfa22b298d4b5500f40685cb7eed414d14933","sha256":"47fdb1fb9a50422af7ae90b577f0636cf7efd9480a3a9bd737e2b71ef43b3831","sha512":"98160139407cf7f23e654117d91c582c1af831c0ef4c722be1291a34443773ba96ca37936d0bed9c8c140074f595f17de8c799682b7fe7dff0c6402a05ce3ebb","ssdeep":"192:ChP1vzRlVG08Mf0k+y9zeqegWL0nR2QxtaHVFo:ChP9rVG08Mf0k+y9ztWgnR2QxtaH4","tlshash":"ecd10aee72a8f5b9275324a4543b945af03a2476781ec0b0d709c4f5bc70c998523fa4","size":6530,"data":"","first_seen":"2026-02-04T03:12:26.443305Z","last_seen":"2026-02-04T16:15:09.788151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4475e0be31e682979b9066a1cd52f100","sha1":"afa5c616f164dfdf86c4c6d66ff86e6c177c3184","sha256":"1a0a0eb5ba2cb271ee93b2136d27a2f6062032fe06f5892b721c0059aa3da38f","sha512":"9bb639c5c057739228b3d3d4d12094f36b76bcc778e38580342413032da04fb7fe36c21af8c577f4951165cc24f842d5ae4a67053623ae85798cf92d58a580bd","ssdeep":"","tlshash":"3e21cb309a961131129d940d376ea3823c455726a552a4cf473df53e64c9e4380ecfaf","size":1127,"data":"","first_seen":"2024-05-06T17:16:10Z","last_seen":"2026-05-09T10:00:35.466153Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/69bd6bf3-bc248ffefb750b46.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7528aeb86b8e1d18462c9367a34f4d6","sha1":"9e9b62a2cafbd63713c1640d7460d1d820da4904","sha256":"a52d9f0ab3f6532d834404fe5486c1e9b385dffc8f4985bcc04a58242e19ae42","sha512":"2df8566487a5b63f03e9755313a949de690d9407329284e27bb508bf9558145a1398cf30f5eb4aa720e45da07fdefa7e8bd15458727ce994dab2998a63e1b63f","ssdeep":"","tlshash":"c4117d89f2f4bb101949147010a3b927a5fd3aaf348f94492a638490e2b195cc923ccf","size":881,"data":"","first_seen":"2024-02-04T01:23:52Z","last_seen":"2026-05-09T10:00:35.446769Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/d08a6a05-d92448afdf309bb8.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51a86ccc1c2dc32fb779f691f27bb54e","sha1":"ee49e951d6c76935b0ca0607f522ddd859f53dc0","sha256":"790d44ec6c3bb367e106f3727947910a745191b36ce49853a2d6331c05902402","sha512":"0876dda514145af1b391bc944df597943a431a27d0bc93cc7e307ff17eb56fb12f296beda3902dab6d6e2d28947f5191748fb89adf6d713cba1e75d721e30b9c","ssdeep":"1536:e1slbLAgTNHWlI2VqyoyhrmGGqbgVn8RSUzjai2eGQzfw:RAewIGqyfFmnqb6uSk9Lfw","tlshash":"91a3d5d93281717757da22a818ff2005f2b7640998cd8094b93dc8e62db4a4e61bff7d","size":105417,"data":"","first_seen":"2024-09-04T12:54:42Z","last_seen":"2026-02-04T16:15:09.802798Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/802SgFFHuD6M2O3lxgcWf/_ssgManifest.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04987fc48c39f077c58c57c1c1245e1f","sha1":"efcbd2d0af83012f60f00897348f2cebe14e5eef","sha256":"0b866dd2cc3bf9a30f5485524381c26afa77adf4462bd6754bb16fbe2fdc3816","sha512":"9c61d606d0c4684938a2f4cb62fd167fb52dd31bc62dfdc8b4e25b50578be81f5b1af01d12262437c63775f55b7fbd8f4e9b63a0b3a6a7c8830f0454d9ba3504","ssdeep":"","tlshash":"9ec04c91e56cfd249a6bcc191eb29b128f92a256d1ec955385ef1205c8651020b01d90","size":148,"data":"","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-08-22T12:51:36.394428Z","times_seen":321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/880.44d903249b768214.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db7c24fe499b93d22ea3fd5fe10a5105","sha1":"d6909c1d392017f5baaeaa324cfe60f73a8d1c03","sha256":"e1f4d494d0efcc0b17af205ea3f6f1020d062ee304d7eaeb900e4df00bc002f0","sha512":"df23757fbcddb799069b43fc2dc3ce4c856389094321dfb56804446e96a942baa1f247a03413b6205284cd00b130fee2c779af809dbb49db2370e6fa4680dd2a","ssdeep":"192:c/WHSg0Zs3kAUe6lS14sNAgy+ER87hWHKMF3dGmsBiDtGalq/oa:c/zg0sl6lS14sM+Ei7hWxIbBiRnlq/oa","tlshash":"982283ceb5a03c3252a665d0051f13ceb36a255a700b55a8f069f8c17cbd64f5a3bfb8","size":10045,"data":"","first_seen":"2024-02-27T07:29:06Z","last_seen":"2026-02-04T16:15:09.812605Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/3d35b88c.5eb21de6aa3a739b.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"809b136ceef0762d5c9d0bfb4b6d14c9","sha1":"7503c9fc761a797f7ae9c0fc3099dc3866d564ea","sha256":"9ca43560cd5e46d126902b8bf5f3c247bf7da9e31549ceb706a9f0045315e29a","sha512":"6d687ccfecd92adfdef3aab143edfc05c20967ee75aace0c361cbb2ff2facd3193ca85a8d589182213576281f174426973d920e0a0c2989480293114afddde27","ssdeep":"1536:la5l0HMDu/4m7Z8qnqJrjFtHQwtXJvq1Zv107DXIOX+z/CZBGEoQfxvysXs26mUQ:D71qJrjDQJT6TZb","tlshash":"0ee319e6b290307e55af04aa506f0005f3787d987c0b44a5e6bde9913db4e8d52ebf38","size":147086,"data":"","first_seen":"2024-07-05T15:23:05Z","last_seen":"2026-02-04T16:15:09.807078Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/93656207-026979d7449eab37.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"227e3387bc13caa1e2f9a67b65766082","sha1":"de67b5be5ad8105ce28939b6448c98b4ade43113","sha256":"718ba3e01f45f6de9d4b71e234115b64a12cfc38bf95e38908f05b351b482b1a","sha512":"0d5ea7bf826c12281c8698da62f2a65f8051c42baaa8612c1efbe43f50df05ff235ae4038f7209cc31b7b1dcfaf692f9a7ad647a4796f1245d5568ddd27c4eff","ssdeep":"3072:2nhbp2CB3MfQGSDBxVdCqbyD5dkJIP6+yBcnoL0nJT0wkNcuYPXEPs+dh1U0Jt9e:IM8q","tlshash":"69c3522cd749e27c1f8ac7a44b252438b94fc6de35e86629d62cc5e033671ecd199cca","size":126556,"data":"","first_seen":"2024-08-31T19:46:14Z","last_seen":"2026-02-04T16:15:09.798531Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b4d7d80c-887ffc0e9a01c6f5.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bf107fb89388dc599ce37fb6080e4a7","sha1":"ea8af6ba5d29338f03bd0d6e854799ffd9d81226","sha256":"a2c445ba040a318e2ef3f1d1619137c4ac74ff2f06ae64430acbc11b6866ac03","sha512":"e4339c0d34d3acd9cee460bc7a69a6334264a7e527c6ba23a63c9b35c19bce602bdcf327513b71f62c5eb28e1aacfb7b73b9b4a3de1b12c5066ab3a17c713bd7","ssdeep":"768:A1LNcDCXmgm7uHSoh7E8INUX8JYmcW2B3s61iMy5zZTULoWguIZzVrpa9tVQt2R2:SNcDCXmgmy28INO8JYmcB3s60My5zZg4","tlshash":"f713462ceb7eb17c5b93d265ca2231705eae86dd2af88614b178c4d132671cdc4a7cc6","size":43568,"data":"","first_seen":"2024-08-31T19:46:13Z","last_seen":"2026-02-04T16:15:09.792461Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/ad943d25-7fe3a56c8d1cce87.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4ed3a20e92813326c61533f40e727c2","sha1":"282e6560e160b62d80dafa504760e62a42748bd1","sha256":"5002abff419159e768233503230f0ffee90e641ac46cc39d53524117eb465723","sha512":"8fd4490ad6a247a2a5a5f2cab6e9a2dd8a080c0f411328f589bb8f4841fd84ad863cc43f10b154288c18ad2cf217e84580b8838ccededc0969c1c40f99108a77","ssdeep":"1536:fXymQmORVpAUDZxnwdKPHOWYf3MxIMGcfl18SK2md335n0Gm9rZki8OPeBwYmhME:fCmQmOZbwoOWYf3MRGE3krjUoAd","tlshash":"56d3a2657098a87152c5c0da68ba1700a737640cf404c07ebfbce6e3a9f5d5b68afb74","size":134426,"data":"","first_seen":"2024-05-23T07:00:32Z","last_seen":"2026-02-04T16:15:09.79438Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b155a556-53f8119c8af8fab6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"933072db7d71696973e1ab950b953997","sha1":"ec1a13c87770027ee8b2bf70e037f1bed7e0059f","sha256":"05f448e6758a3e97249265e50f112e8abffc69f9ac17c05f7f2e3fd30867f9e3","sha512":"44921b168938949d2dbd9e4e8ea42f0306630e9eac384dca973cdb64cb5b3a04cad53a7ed9fb7f5a31d689fb3329110142e3bc3567abbebfa934904994a37a69","ssdeep":"1536:173OqJd85kj5Mv7MpbmzTM9uhc1VSNsmSlEeOX6zj:173N85kj5MvKmyfjUvSqkj","tlshash":"1e93d5a633517177a3de13aa18fa5400f3b6548d984e042cb93c98eb2c7065a61fff79","size":93192,"data":"","first_seen":"2024-09-04T12:54:41Z","last_seen":"2026-02-04T16:15:09.790422Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/1035ef44-e4d66d81a61710cd.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc953d7d757ec4d0c8e05da59ce0a20","sha1":"ea7e1f38d4ede9758465d14daddfe87f07e587c8","sha256":"19f0fd14fa48ac2d083f27306d4e0ed3120feccc6fb2485dbbcd6bad2efa19dd","sha512":"7880d15446c23d16383f4c1031649727866634a2707fed1d9bc90099285a73eda105101a8e6bce81ef2ce924936fb22f9694a9de1f39285e6c6f043ba74866db","ssdeep":"768:vG/2FToaromBUFsDP51vaKrJ7Nf6KIo8g3PqMAK/dokQzrwc+sqoR2aPRPwMq6ls:vyEd6wNTrrffqMENgc+sqoR2S65Ku","tlshash":"9453faea72aa717187ae80d7d4aa0500f33d5a59240d403df1addceb6c69504a3bff39","size":64227,"data":"","first_seen":"2024-06-28T09:43:55Z","last_seen":"2026-02-04T16:15:09.7781Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b13ba9de-11ef9f2e07c3e310.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ba712e60de2be24d2d93560671b41c","sha1":"336a010e60282dd1ff4355b3381832d329eedc6a","sha256":"add9014b6384d37bf29158c2edc82417804ae1b348e8e3eaf212db808d3437b9","sha512":"27bcec94c8fb245daabc5ebfa3d7bf273b6b5a26ff9d4378f484b74f421bd602f98b00d290cae8d164521ac567e0c96f0c0bb19628237126376c6bf2cb0f0e22","ssdeep":"6144:tZpt4ZbXUZuq2hQPw7X5E+CuzkkdHDkT1sZoW77PIXz3H4Bl/kNvEtq6JrVBluO:tZpepXUwq2hQPwj5VCuzkkFUW77O68O","tlshash":"bd644c72b259603dcaf8609a68be1a02f93b1e7a2546444cbcfcc4df914494625bff73","size":312814,"data":"","first_seen":"2024-02-04T01:23:51Z","last_seen":"2026-05-09T10:00:35.432958Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5adc83ef-8e07286a1a4aed9b.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2543c31dd122dd2df5c5380fa45cdf0a","sha1":"9a913437a395755fbbb41242b9f7abc0829863e2","sha256":"7c194aa36f7f31770cb08aebb57b0102ba13f4b80dd491b9cd17c43c19c515c1","sha512":"afb9de1885d444101599249c721e6a73142f00aa7f991141c87148befe643f3b6339a9c6b863f49fb91172a83bd0b52f713d7be0eb4864d64bc7a5645a42db7f","ssdeep":"","tlshash":"4a71652ce3a5e7bc6c6243e4467354b4aa4ed2de3af8c228d579c4e470721dcc088cda","size":3497,"data":"","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-07-11T08:11:25.360033Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/ad54e6ef-6fc63f30e1d3513e.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c5d189484a1a54b25870c3f799bb94c","sha1":"ed557119e5fa6cc3dc06655091cf62d173f0f15c","sha256":"1ca7d6b16c81888be70f7d0dfa9c06dd9ab36652de55c49a52f9868c467a1bbe","sha512":"d9e2d41f312918cfd1fe482bd34150f1ef2bd7d6303a26cec4bc529eac6a961353e43eb61552f12618f80dcc7446e2b40c6bc3d4d09d53d9ea456763aa511c20","ssdeep":"768:6JHjHqawzkCkmWJc3X0RGVz6Op20Mc4IQwZ7CDtemyLOm7DSaALf+yCMA7:/awVkmWJc3X0RGVz6Op20Mc4IQwZ7Atq","tlshash":"e9c2442ce295f37c5bd296b1c6223070aa9f46ed3af84658e67981e431771ccc1ddc8a","size":27592,"data":"","first_seen":"2024-07-30T21:24:56Z","last_seen":"2026-03-14T20:39:56.632247Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b779bb5e-2a65d4e63e363ec6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f7cb8c930cabf410f149b1b7393cafe","sha1":"7a4c5d7e815768530b65d11ac0efbf0d83428ea3","sha256":"3e5110241fad8929050026195d8690c08ca7ae1ec2dc5093a524890e72288c43","sha512":"d4ae399871c2ab8a76e7686286847b87ca489b67a8adcda8871b43b3b0ee00741ecc8638c627813b988d4fc2e70ebe171a2c7885d502b7a3310a24ce2351ac4f","ssdeep":"768:FVG/Xy5a0omBU6s+PUJPsLVMoS0L8hOpo2+zpFJTNs5DokewT0wmvsq8R8MSxivJ:FVyQdFi+n9IhX7JThKTmvsq8RU06D8","tlshash":"8d43d9da72ea722197ae9096d46a0500f33d5a99240d403df1addceb7c69104e3bff39","size":60549,"data":"","first_seen":"2024-07-19T17:51:41Z","last_seen":"2026-02-04T16:15:09.811688Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/9b583bcd-17d841bbd10b7965.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d76c7a0769226f9dbd519da1b81a482c","sha1":"1bf9a8c114fae8edd63592aba7a730f06a5575f5","sha256":"1e630e3455af6829ddfcecb1d553c60dec5c1c106017017083762494b9cbbe60","sha512":"001faa7c250b5859e9f72068b68683ec20e2a071e1f5a8e268bf93e4f204c8f66b76f15ab54057ae1a8b119d0249274927a84fffc8c4c504bed8c9c3141a43f2","ssdeep":"768:wLTiRr9zc8OjmrLCXrcEqOsNc8jvUAKIrz5V+Ni9IkRvldamtyzQ:OiRr9zc8sOGbcEf6cu/7IkRvFP","tlshash":"0e43a789fa60725203d3e0b9e13f552ff331696a651d0570a242ece93ca528c86bff75","size":55332,"data":"","first_seen":"2024-05-23T07:00:34Z","last_seen":"2026-02-04T16:15:09.808391Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/2edb282b-a83f7ffd007bccf0.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a94742c4baa1c17608128b3731791b4f","sha1":"a7aaf6087919128b7708f720f06a2453a748ba40","sha256":"2d19a824c24f751551b1fa75d3b8b3148e35e068f5605d701e3239b110a699c2","sha512":"9f1b8ac5211de6af01ac417c61241ae065d9c8aba940e032d7828e7eb523b96f932f3accdd3929472eff49dbffe0c18b13e59bf5cfda492c45210e4dd810f1a6","ssdeep":"768:A149kdWHm4npVfSC3CZyx6Hiw0T6UHjcJxq1WUwhuXnqWa+LfUR2RgjbW4/hikEM:A1ZdwmcVfS4icT6bK1WIXJaBEgXW9w","tlshash":"df6381d87ac3f01a87a370a5006f088bf23e6f6469dda508d196f0ed7db954e9133e19","size":69788,"data":"","first_seen":"2024-02-27T07:29:07Z","last_seen":"2026-07-11T08:11:25.356545Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/main-e1bf073def1a226a.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a51cf278c65578bbe52f6991c65b720","sha1":"df3f52775524946aeabdf55c26b24f215151591f","sha256":"889891e0e18f04c9ee3bdc9aa44942af3a6568600be4ead60e579b906cb7a10f","sha512":"5cc66407a6dc7d281e6e8175cd1c52e3098c3c012aa9508e69a6b87bedee65a2a335f96d6712cb656b0345067c629bc92bf18d383436d3c86a3cfd7103dd9763","ssdeep":"1536:jp28BY57fkREoS21R8S+ny1uxC4zBLGCLz6R88922Pk3xY5LpxxCM4n:qzkhR+nyullLGCLzB8l8BY5Lpxxmn","tlshash":"6bc31ab676d1f8b203cb40a8843b0006f27a5dbe542e6045f3a5dcd6b9a499d90f3f79","size":128723,"data":"","first_seen":"2024-08-31T19:46:14Z","last_seen":"2026-02-04T16:15:09.791781Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/a29ae703-46d951b11c376d36.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c464e6385b6375e40cf1573a91485a24","sha1":"fe99a3a651f8c3aa992936abbba4f4caf727c34a","sha256":"33d5fbb9fc710664970a9bf82655410e3b9690867b55725c3b810e14e9245967","sha512":"d520d1515f5838a98b2fc8fd26f615990b2bca0c910b9f0968de553f834357e6ad152a4d7ad22306d2a45ed663b91645fe8a6eb28d2044530d5f1e64bf4c1a80","ssdeep":"768:u82gsyBfQ/pDBVAGJrgHO9P76d8N0VZ8UK/cxjMYTuHSGrrzcOOA:l2grfQxDP1YO9VN/bc9MO8S43","tlshash":"d04382ce3686b512676212b5483f040bf33e5d99680e4d1cf519d9d97c38cae827bbb8","size":58277,"data":"","first_seen":"2024-02-04T01:23:52Z","last_seen":"2026-05-09T10:00:35.447576Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5962-78a759aeaefbd5fe.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa925d462846d7c0b8b50ea14edba463","sha1":"c1f5cb5512a06338124335ac29ce9f7d403ae9ec","sha256":"df09b384400ddac0891c2ad735936c61d662b607757e0b9ffbf88912c268c50b","sha512":"72ccbee7c334eba18c3e249f47d477b2a28e8578b21f43f7de7ee56f4f43758c57bb2754fa2d29a89a4d4bbec6cf2e7bcdcb79287573af2b105ae244011def3c","ssdeep":"24576:YgU76Of+7btWCDNvqIbk8JrmNkzjUvJuDj:YgU76Of+ntnDNvqIbk8JrmNkzyu/","tlshash":"5cc51a69b140e4fd62da87c5c41b2918f7ef096aa2453894f5dccd0923d668c32f3b6e","size":2705857,"data":"","first_seen":"2026-02-04T03:12:26.45678Z","last_seen":"2026-02-04T16:15:09.832407Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-04","alert":"Hunting_JS_WebAssembly","trigger":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5962-78a759aeaefbd5fe.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e12303e1ba8396c42f3039b1a73c6823","sha1":"78d290107c9a18e4038217029aee47c04a79a8b2","sha256":"0a08f412c67866979dbd36b92ff9b3c11a0a7e9d77525a7222d38c28ecb171b1","sha512":"7b20a74e62dc2114fa2d7c4e8c7924b0007584f050929761e983ea5917610acf94ac58662a37ca18d9149c98e0b4be8db984332e4844f0d28a3dfb711dbb98de","ssdeep":"","tlshash":"97011049d650113b735f9dba298e2381362945b0960002feb236e2be426a4d2c3f13b6","size":734,"data":"","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-06-06T21:03:53.706521Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/8c469d57-15109969c63e1543.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e1be3fa5f3735304ed215cdf3f04421","sha1":"87b6bd03357bb796b8a034d0c67270a95c73a405","sha256":"f6579e8009878bc443961c2d390c7517bfd6f99aca9818f04332e6587ec6f271","sha512":"b4d2be293eae327fb4b4299fa8a74d294578653b0aa411e55b89cd9e2d674fb790d666baadf1bb248c685df8840d45bd82655abcc449dbced93827e61ac0a6af","ssdeep":"192:h2YMPTiiSw7ZRTIB71s8Fg0UvAlTGUU7EI:h2YMPuiSupIB71BgFvAlivEI","tlshash":"39e1a6bcf7d4c2bc3d8467e6d9335038784f469a39b8c32cca59499a35735cc819a8ca","size":6916,"data":"","first_seen":"2024-05-23T07:00:32Z","last_seen":"2026-07-11T08:11:25.287309Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/pages/published/%5BdocId%5D-bdf035384f1ca788.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96a1d27475054d4662b1184e0287dc0b","sha1":"cb36de2ee881e44224876e180f623268ae302cbb","sha256":"acb869eba19fb6ff91159a115605c918f59aada83e0d77dd3a9ae4e4d880906b","sha512":"b822c5913c1c0dce5269e3cfe4fe07da6956150cabef285fc943b79b3750d54d174e2536b370198c882c0724e0f9a4fd0f5fd89366ce6dfaa2b5afa2f7bc950e","ssdeep":"","tlshash":"a1111069f5c1b8bc336b10ec0167280866de295b589ae681fbb444a17cf610e9223fc8","size":957,"data":"","first_seen":"2024-09-04T12:54:42Z","last_seen":"2026-02-04T16:15:09.799655Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T16:14:38.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: no-cache\r\nx-super-powered-by: gamma\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qF6P%2BUqqbrCGkTkbtx50L69%2BzBTrIT3Xath0IJrIWP95fBMm5zsM8LDK86jHwXl0B9ccCAkGgH6zrJBiQhDxsIHo4QMkJmqVO%2F7xKmwAJ%2BaUzjP3ZPTZDrqLkjki45M6HxVV\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c8b7652b93b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216549,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (43528)","md5":"2a686fbe0281296ddf628f9815ad9a28","sha1":"ba13da57625c0282b9f893b600f3f15fb59c611f","sha256":"6788d40684518fc42d85492d3767a0dab818d94f0c854bf08716ee9764c5f28b","sha512":"2d8c5edf564ba93abefd2f6833c0a71fe6579871c818aa195be9b941fcd1e98e655a1efdfd6c97b3d01302009c29125f3119481ae795d62f0c5ba5d56ebd24a7","ssdeep":"6144:EObrn8gm0H2GFEhP/3VLLsKldUK/i/T7z5xekNPS7v2zFprLhlIkm6:EObNm0H2GFEhX3VLLsKldUK/i/T7z5xx","tlshash":"9924e9a9c221e5be5933ca1d12dc79296638f842ce4057eff694816d46c7afa1307f0b","first_seen":"2026-02-04T03:12:26.429363Z","last_seen":"2026-02-04T16:15:09.774055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":34,"dns":6,"connect":1,"send":0,"wait":675,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/1035ef44-e4d66d81a61710cd.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/1035ef44-e4d66d81a61710cd.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1fc953d7d757ec4d0c8e05da59ce0a20\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQI9xX2Ga3JvsIKNK3iL91qFQzqpzFleWbRG8r5RORed6gSaQ7rT9JybwLrytn8KTHbjj39doKeZ4FUf5lQYmau3fY1N5PSEiC1Rfqggqax58V8IgVnxwm9e5GhcxhNNdcl0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76586ae7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43571)","md5":"1fc953d7d757ec4d0c8e05da59ce0a20","sha1":"ea7e1f38d4ede9758465d14daddfe87f07e587c8","sha256":"19f0fd14fa48ac2d083f27306d4e0ed3120feccc6fb2485dbbcd6bad2efa19dd","sha512":"7880d15446c23d16383f4c1031649727866634a2707fed1d9bc90099285a73eda105101a8e6bce81ef2ce924936fb22f9694a9de1f39285e6c6f043ba74866db","ssdeep":"768:vG/2FToaromBUFsDP51vaKrJ7Nf6KIo8g3PqMAK/dokQzrwc+sqoR2aPRPwMq6ls:vyEd6wNTrrffqMENgc+sqoR2S65Ku","tlshash":"9453faea72aa717187ae80d7d4aa0500f33d5a59240d403df1addceb6c69504a3bff39","first_seen":"2024-06-28T09:43:55Z","last_seen":"2026-02-04T16:15:09.7781Z","times_seen":43,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/7045-cf5843618d309941.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/7045-cf5843618d309941.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:40 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"b0786a0236bfa5625a9d8b9910724953\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 16:14:39 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cye%2Bk9dNi0W5OdiHslHdpASG2erT4RtWHUc7D1sbOWHR3kxpNucX91bZcVXjaz0kG7iGh%2FPQBTUgJMWq9Sa9qs1KuP%2F8yBBko52Ra5b5OIWWl0dvs98B%2BgrNiuJzOKC9fzsL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76588b34c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2793882,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"332646a346bfa5d05d47c4030cfd3cc3","sha1":"9c0c42602b81ad74befcfa18752d11db142dc644","sha256":"1809eeed16cdcffd4546ec92e816c7558a344213cce13214028a3221579bca34","sha512":"a5796a9876b3c5673cf753579b91af301162b8ff9421a4fc6f56b44c20319066d56e471773741a2f018e9c1170b1fb7b2010e9fb812bf1655d5903734040581f","ssdeep":"24576:2LUZWQ4blAXxuO2k9TUWC9tQ9POmGng+w3O7k:2q4SXIO2k9TUW0tQ9mmGng+w3O7k","tlshash":"32251ac872d2b06203e361b5403f110bf33e6969684d8424f265d9e5bcb999e827bf7d","first_seen":"2026-02-04T03:12:26.410713Z","last_seen":"2026-02-04T16:15:09.780387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":528,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5962-78a759aeaefbd5fe.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/5962-78a759aeaefbd5fe.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"fa925d462846d7c0b8b50ea14edba463\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7UMR9BHi1ZGIuDRBGquVDhbj7ZczNb3VPkehzrMH8pINyiGtZkfZKA1J2iTONDqVbAZSf2AiBNbF4AiGmPx2zdqiPqiJ3acEa4u9GN8COcD0jVGsywp2vvusahQ5WD2sd%2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76588b41c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2705857,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d6161cff67e4785f467d7cd89cdc0faa","sha1":"dee2d2e575293c1587d9b675c6b8e51b963880ac","sha256":"37c4f9866a009da792197b43c279b260e8cac248fe5c519e333c93d809fe9e56","sha512":"70715704cedf6a4ed678dfda8672a464aabe4e2414efd57f4d6df36a7f711c25ef7aefd61cd4164daeb6f3177ce5ff7dafa14a6108bb366316f112e6e39a529c","ssdeep":"12288:Cuqfoivld4YhXNO9OIs5Rf+ASxlt96H5C/rNg:YgU76Of+7btWCDNg","tlshash":"cf255e95f3d2bda9e7e784cd8067420cf12e794454098534f97ddc8a2296a84b2b3fec","first_seen":"2026-02-04T03:12:26.440251Z","last_seen":"2026-02-04T16:15:09.78298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-04","alert":"Hunting_JS_WebAssembly","trigger":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5962-78a759aeaefbd5fe.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imgproxy.gamma.app/resize/quality:80/resizing_type:fit/width:1200/https://cdn.gamma.app/328ukwdyzf765e6/generated-images/CcXtXI1bkChvfNXJaEok9.jpg","fqdn":"imgproxy.gamma.app","domain":"imgproxy.gamma.app","tld":""},"ip":{"addr":"104.18.11.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 00:43:10 GMT","end":"Tue, 14 Apr 2026 00:43:09 GMT"},"fingerprint":{"sha1":"DE:B7:93:88:08:85:FF:B4:F3:0C:B3:87:36:91:29:9B:27:A3:38:51","sha256":"C0:5E:23:A8:8A:9E:58:72:5C:26:1C:91:81:33:53:6A:1E:14:A7:10:FC:9F:89:1E:12:4F:E1:D0:91:F4:60:13"}}},"request":{"raw":"GET /resize/quality:80/resizing_type:fit/width:1200/https://cdn.gamma.app/328ukwdyzf765e6/generated-images/CcXtXI1bkChvfNXJaEok9.jpg HTTP/1.1\r\nHost: imgproxy.gamma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:40 GMT\r\ncontent-type: image/avif\r\ncontent-length: 50115\r\ncf-ray: 9c8b765a18c032fa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public\r\ncontent-disposition: inline; filename=\"CcXtXI1bkChvfNXJaEok9.avif\"\r\netag: \"c0d34466ea2da712376ccdaf3e2b0d9a\"\r\naccess-control-allow-headers: Content-Type, Authorization, Accept, X-Requested-With\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS\r\naccess-control-max-age: 86400\r\ncontentdisposition: inline; filename=\"CcXtXI1bkChvfNXJaEok9.avif\"\r\ncontenttype: image/avif\r\nx-gamma-cache: HIT\r\nset-cookie: __cf_bm=ySTU6frECn.hpgFWD.ptcqW7kwGa6J_dqxuR0Ve.QzE-1770221680-1.0.1.1-Rp3vhY3escPA20ph_aE.oEXmDL9QTpbLl_o55sALhgRPRS_YiXowSEuNxF.18Afqi6jefgtRofT5Y0xpPcmd3bsxnbXoh86dUkY59qCJdUw; path=/; expires=Wed, 04-Feb-26 16:44:40 GMT; domain=.gamma.app; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50115,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c0d34466ea2da712376ccdaf3e2b0d9a","sha1":"13a3929982e409f19ddd722fd769a86c644da5bd","sha256":"86f1d2d7d99ba5e1c02ebb14bd5a8b2b870e3fc5c1607d8489e1b99a53d34009","sha512":"0280ae2295e56eed2b5f0a1c874fd82cab12c6236c47b2648cf31085d99fa9957bd979bcc41a0f751b54856d2414c34e3b10ae13e121b98a8d2a2ee815cd0c51","ssdeep":"768:MaRx2p7uU9f5wj0BgT8Yx3FqDQKYosPxNhzPCAEIn1dj4qzGkL0/5rMPJx6RrCEJ:dSxemgTYWxNhaAdjLYBrIx6RrIi","tlshash":"39230110a500720ee36542684953d65f1ecfa9bfb3a6b1fe62f10e48950af1cf6bd05b","first_seen":"2026-02-04T03:12:26.426443Z","last_seen":"2026-02-04T16:15:09.785101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":61,"dns":34,"connect":5,"send":0,"wait":424,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://contato-whatsapp-x2el03r.gamma.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:06:44 GMT\r\nexpires: Sat, 30 Jan 2027 13:06:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 443275\r\nlast-modified: Mon, 29 Jul 2024 22:44:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T16:59:54.095114Z","times_seen":10324,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":89,"dns":6,"connect":9,"send":0,"wait":15,"receive":4,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/webpack-88a6027fbe47d18d.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/webpack-88a6027fbe47d18d.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"af8d77ca24048f1eaf5cb0c410d1177b\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CqJo8GUciJXnQRcKPVa2%2BLNeW%2BGtYUwXzhU1%2FBBx%2BPMRCnh6hloCLzbKaFm%2BPi8Gwz8mQo4aK9mMPR%2BYpeBS8%2BWV5YLdBltI%2FIuYBlNnY8oZuouRl3Fkij5iERpKY2%2BZmbAV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76582a2dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6477)","md5":"af8d77ca24048f1eaf5cb0c410d1177b","sha1":"947bfa22b298d4b5500f40685cb7eed414d14933","sha256":"47fdb1fb9a50422af7ae90b577f0636cf7efd9480a3a9bd737e2b71ef43b3831","sha512":"98160139407cf7f23e654117d91c582c1af831c0ef4c722be1291a34443773ba96ca37936d0bed9c8c140074f595f17de8c799682b7fe7dff0c6402a05ce3ebb","ssdeep":"192:ChP1vzRlVG08Mf0k+y9zeqegWL0nR2QxtaHVFo:ChP9rVG08Mf0k+y9ztWgnR2QxtaH4","tlshash":"ecd10aee72a8f5b9275324a4543b945af03a2476781ec0b0d709c4f5bc70c998523fa4","first_seen":"2026-02-04T03:12:26.443305Z","last_seen":"2026-02-04T16:15:09.788151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/2edb282b-a83f7ffd007bccf0.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/2edb282b-a83f7ffd007bccf0.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"a94742c4baa1c17608128b3731791b4f\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KHR5OQJq36DcUbe43FcxBOYKerzSs6M0Oz018rQmdH557L%2BEpwta6amwP8ATAjqhm%2BVy6ABHcXlbHeIvNCtizDKoQy6sKMp7WxZ2P8R1rXrBwCqEfZYeT86Z56EaYU98NoWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76585a9ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65344), with no line terminators","md5":"a94742c4baa1c17608128b3731791b4f","sha1":"a7aaf6087919128b7708f720f06a2453a748ba40","sha256":"2d19a824c24f751551b1fa75d3b8b3148e35e068f5605d701e3239b110a699c2","sha512":"9f1b8ac5211de6af01ac417c61241ae065d9c8aba940e032d7828e7eb523b96f932f3accdd3929472eff49dbffe0c18b13e59bf5cfda492c45210e4dd810f1a6","ssdeep":"768:A149kdWHm4npVfSC3CZyx6Hiw0T6UHjcJxq1WUwhuXnqWa+LfUR2RgjbW4/hikEM:A1ZdwmcVfS4icT6bK1WIXJaBEgXW9w","tlshash":"df6381d87ac3f01a87a370a5006f088bf23e6f6469dda508d196f0ed7db954e9133e19","first_seen":"2024-02-27T07:29:07Z","last_seen":"2026-07-11T08:11:25.356545Z","times_seen":124,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b155a556-53f8119c8af8fab6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/b155a556-53f8119c8af8fab6.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"933072db7d71696973e1ab950b953997\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wioKtU6bj%2FS3JaFhdcMEcAFcNronHnqIQba%2FnZzZe84l5XUmoNBa2XxRkmH2ocIJgX7WLWdQUmkgvibGI0lcEBm7LEHvog36t%2BUji9KuyryZ%2F0fkhWV3gvrvhh2yleWSfdH7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76586ad7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93192,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"933072db7d71696973e1ab950b953997","sha1":"ec1a13c87770027ee8b2bf70e037f1bed7e0059f","sha256":"05f448e6758a3e97249265e50f112e8abffc69f9ac17c05f7f2e3fd30867f9e3","sha512":"44921b168938949d2dbd9e4e8ea42f0306630e9eac384dca973cdb64cb5b3a04cad53a7ed9fb7f5a31d689fb3329110142e3bc3567abbebfa934904994a37a69","ssdeep":"1536:173OqJd85kj5Mv7MpbmzTM9uhc1VSNsmSlEeOX6zj:173N85kj5MvKmyfjUvSqkj","tlshash":"1e93d5a633517177a3de13aa18fa5400f3b6548d984e042cb93c98eb2c7065a61fff79","first_seen":"2024-09-04T12:54:41Z","last_seen":"2026-02-04T16:15:09.790422Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://contato-whatsapp-x2el03r.gamma.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:06:44 GMT\r\nexpires: Sat, 30 Jan 2027 13:06:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 443275\r\nlast-modified: Mon, 29 Jul 2024 22:44:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T16:59:54.095114Z","times_seen":10324,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":27,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/817.5046e0241819580f.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:41.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/817.5046e0241819580f.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:41 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"c969ac382cd7442bfcb067e0c8b08dd9\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:57 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46964\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6dE7UmXtvk7sAjzXZ4WSvvnTftMSOcB9veZB4DKLedOcyaiFPIi9Eq%2Fn7e7HT7QAs3e5s60Lz3Oo6SQAvXn6a3%2BwARA0QWbjdOz4aX0BouHP987neCY%2FlkEGlKvpINErrmT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b766589afc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7651)","md5":"c969ac382cd7442bfcb067e0c8b08dd9","sha1":"5d7013153bac3ddce952a0993c9e35bd2cf6678e","sha256":"38324c676f2ca578a4b830b18788fe3676f6c8565fa587d02c9050af4d2ced46","sha512":"e36a49ae47f3602c4d1bee97999e7f776ff7e90fb074a761dd673144e06ec9b7f37118cfaba7ff630a3e7a2ed1a20ecf0e065270373275446d2e686440aaa866","ssdeep":"192:9/3GrooO0CfbMoMOmo8l4HNe7frsraAe/WQ75HoxFfagF7I:9/Grm0Cfb/MOZCKNe7frsraAe/V75Ho8","tlshash":"9df1964161e27cbd0bcf4be7b05f1545a22b960d688868acfea859d2dc70b06315ff78","first_seen":"2024-07-05T15:23:05Z","last_seen":"2026-02-04T16:15:09.791166Z","times_seen":47,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/main-e1bf073def1a226a.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/main-e1bf073def1a226a.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"0a51cf278c65578bbe52f6991c65b720\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VhMbwR2HS2yeqOBj4hMrN5ENm6f6WUccOVFS0pzxd8p0vXrlVexDaxVVkrIV7sqOfPwIWLiw%2BZiUvmHlwE4hZ4QVKtRse68XZgc0Utz62o1JHBQoNMrOpOu4AV5EFuA08wD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76583a3bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a51cf278c65578bbe52f6991c65b720","sha1":"df3f52775524946aeabdf55c26b24f215151591f","sha256":"889891e0e18f04c9ee3bdc9aa44942af3a6568600be4ead60e579b906cb7a10f","sha512":"5cc66407a6dc7d281e6e8175cd1c52e3098c3c012aa9508e69a6b87bedee65a2a335f96d6712cb656b0345067c629bc92bf18d383436d3c86a3cfd7103dd9763","ssdeep":"1536:jp28BY57fkREoS21R8S+ny1uxC4zBLGCLz6R88922Pk3xY5LpxxCM4n:qzkhR+nyullLGCLzB8l8BY5Lpxxmn","tlshash":"6bc31ab676d1f8b203cb40a8843b0006f27a5dbe542e6045f3a5dcd6b9a499d90f3f79","first_seen":"2024-08-31T19:46:14Z","last_seen":"2026-02-04T16:15:09.791781Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b4d7d80c-887ffc0e9a01c6f5.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/b4d7d80c-887ffc0e9a01c6f5.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"2bf107fb89388dc599ce37fb6080e4a7\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5y9VZX49yfVCnu9NTw%2B08p6gJTF1%2B90DX42QQ8xrZZsPiwgHVedPqlxxziVYXdyiJxJUKMrU7BvkLgkuaMbEwjFtl9kVjOyhg7uwVhOq%2FRKPJRE4EWBVd%2Fl77H7jq%2FwQHTl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a6ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43514)","md5":"2bf107fb89388dc599ce37fb6080e4a7","sha1":"ea8af6ba5d29338f03bd0d6e854799ffd9d81226","sha256":"a2c445ba040a318e2ef3f1d1619137c4ac74ff2f06ae64430acbc11b6866ac03","sha512":"e4339c0d34d3acd9cee460bc7a69a6334264a7e527c6ba23a63c9b35c19bce602bdcf327513b71f62c5eb28e1aacfb7b73b9b4a3de1b12c5066ab3a17c713bd7","ssdeep":"768:A1LNcDCXmgm7uHSoh7E8INUX8JYmcW2B3s61iMy5zZTULoWguIZzVrpa9tVQt2R2:SNcDCXmgmy28INO8JYmcB3s60My5zZg4","tlshash":"f713462ceb7eb17c5b93d265ca2231705eae86dd2af88614b178c4d132671cdc4a7cc6","first_seen":"2024-08-31T19:46:13Z","last_seen":"2026-02-04T16:15:09.792461Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/998ccc15-ad35dfdb33c695e6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/998ccc15-ad35dfdb33c695e6.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"bc121d6c577087e084a5d4bacb0d726e\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46964\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyZEpQ88UyfQdVQOXr6yBZ7VUTmpv1MHWmhc4yplZ7o%2FBTVvqwf7RLUPpumqzou%2FaSV3HF%2FRcxN9P6JBJI2VOq6qPgRoJ4RJrbqvzADFyNiHwfdOcAUThih7c7Cx0JzHekkn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76585aa1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc121d6c577087e084a5d4bacb0d726e","sha1":"870928832466b676778b09d114d14b2973c8f0d7","sha256":"f57052cac40c50c424f837a0ce6b262f4914b144fcc671518a722e68cfef55df","sha512":"f1f8e59a23b0c9770fb031056009c5600d1f517b275242264f56bfe93bab3a6feaa7a06f3c2e34857b28f8662c77884e880db85d838c56a8bbf441cb05ae84dc","ssdeep":"1536:RTFIJ8wN5kMcNTNWd4C1rTAdidTFEc+b1pk1K00q2mnv:RTF/y+lA48bdTEpV0X2k","tlshash":"5bd308c8b2e2707d96136968825f1706b13e3945300f8da5f676e4c62eb844ea17fe3d","first_seen":"2024-02-04T01:23:53Z","last_seen":"2026-05-09T10:00:35.421478Z","times_seen":82,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/ad943d25-7fe3a56c8d1cce87.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/ad943d25-7fe3a56c8d1cce87.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"a4ed3a20e92813326c61533f40e727c2\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41WRaW9mZUa0y6lKuRP%2BkD0%2FfTg2wVQdvd9AGfkDqn8SmmnmpirNf5GCkiJKbF5zXSkJH9RZg5oeOpA0ZGdRk4pm6IM6WZ35xjlB83ngZpUcU980inVrbdeJz3vibb7av6qY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76585ab4c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a4ed3a20e92813326c61533f40e727c2","sha1":"282e6560e160b62d80dafa504760e62a42748bd1","sha256":"5002abff419159e768233503230f0ffee90e641ac46cc39d53524117eb465723","sha512":"8fd4490ad6a247a2a5a5f2cab6e9a2dd8a080c0f411328f589bb8f4841fd84ad863cc43f10b154288c18ad2cf217e84580b8838ccededc0969c1c40f99108a77","ssdeep":"1536:fXymQmORVpAUDZxnwdKPHOWYf3MxIMGcfl18SK2md335n0Gm9rZki8OPeBwYmhME:fCmQmOZbwoOWYf3MRGE3krjUoAd","tlshash":"56d3a2657098a87152c5c0da68ba1700a737640cf404c07ebfbce6e3a9f5d5b68afb74","first_seen":"2024-05-23T07:00:32Z","last_seen":"2026-02-04T16:15:09.79438Z","times_seen":41,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/802SgFFHuD6M2O3lxgcWf/_buildManifest.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/802SgFFHuD6M2O3lxgcWf/_buildManifest.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"271cf43b028a77a989e849796b95cc93\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1GYu%2BxIQYFzkIVVyGMBh%2FuTqkwo8VT20wjBx%2FCAuQU1BYqd6T%2BA3qyDMN7WThD5xAUFJM7HBfhL2zSBl7VQGM4rTGHam0uklfauKI2KDffx%2F5SOhK6G5ORtJBLxsZ1LWwFF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76589b65c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6407,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6407), with no line terminators","md5":"271cf43b028a77a989e849796b95cc93","sha1":"32c00bd5ade48528370629a512f35244b5ad45f8","sha256":"6c82efec814a892bfd0ab09d3af1a65840ea99e74bb3e3b2cd2776da6d9f3bde","sha512":"a2093b4d8ffeff2c376090cad34c17fea7d1f16e29165d9e06c982687b4950cb15f3614f21a5c09990f5f1c41d43623f563c9f14d2e483b577bb0538a56776df","ssdeep":"96:/GI7bs8/lkDiIYV4qi+1Eckmc1n28bbuHkYwkrydtyvkS6:/GI/s8/lkeYqiQEckmiNycS6","tlshash":"3ed111435c24fb7a2a41f6ecf53e1f0e08a09a31e5768ac5abad8e5119f140f0356e77","first_seen":"2026-02-04T03:12:26.421199Z","last_seen":"2026-02-04T16:15:09.795179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quattrocento:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Quattrocento:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Feb 2026 16:14:39 GMT\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"016e4bf023cd01a81f32ab1c07f8a09b","sha1":"344fed00214439885ab55d358e9dd5cd3319cbbd","sha256":"5a90a011928ea9c0eabfd153d923b3b1eabab407e99cf10c6a25be1d88e6a098","sha512":"477cf7d408b34d543958bd3b89776e2c1ef86b5bec8a08ae654500922bfdbf8673f1c78c20b91f2cc28a4c89ac06ea5bea388316ac4f3f6567ad31838d20d121","ssdeep":"","tlshash":"1431fdd2046f9504db830cc112cd3f33fe5ea194a458a53c9ffe28c4ac9ad5a43a1b2e","first_seen":"2025-09-22T17:15:53.072773Z","last_seen":"2026-08-19T02:42:37.817381Z","times_seen":143,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":88,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/favicon.ico","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:41.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 04 Feb 2026 16:14:41 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 24 Sep 2024 17:57:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-super-powered-by: gamma\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHGSJfR%2FZIR1M%2FCV%2FqehOLgrA1C5k94B%2B7l8OuAvRhadOgv8VROxMOYq%2FWlcKEIvqM8253fk%2BF6kFVCJliOokmH8gZq%2BlnDsXiXM%2BBDE5%2BYzfPddGFwQqJKPqQ4J41oQO5Yi\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c8b7663bd25c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31551,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (21240)","md5":"571ebb33b8d807e13608be433ff52054","sha1":"9ae0958761a032dcca3d08a1e7ff8cab6eacb847","sha256":"5b238b877b7801016a751e114547279b3629f13363af7391106e9d2c9cd1ee56","sha512":"012c95a04408307f4c11137e775a08ac76d6822ba13f3e5b98e5a16efcea55666407ad5d678d47a66768a94dab6e3c9ce376b57d2e5dfc928881b5a57618789a","ssdeep":"384:V8UZH9rZHHQ7LYOQXgtgcmNitfUbTdrqO:V9r1/BHNxvdrB","tlshash":"86e2ec19a121c6ce5c33ca5e42b0ee31b554e9066da4178f37fb94b8fe9b9e1504de03","first_seen":"2024-05-06T17:16:12Z","last_seen":"2026-06-08T06:15:39.955791Z","times_seen":46,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":530,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/5adc83ef-8e07286a1a4aed9b.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/5adc83ef-8e07286a1a4aed9b.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"2543c31dd122dd2df5c5380fa45cdf0a\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pq%2FLVnXH9TAMy3yxAjAocVR5yl%2FfEeCMrg72%2BSdbT9MUo9gckhKf26TJ8JLpM4ExhMSczcKFJmf%2FSbuHE2dt7VHQwfZiW82HZr15IBuiiCsfFLLG1wpjTQLWAYOymd%2FfSPJn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a57c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3443)","md5":"2543c31dd122dd2df5c5380fa45cdf0a","sha1":"9a913437a395755fbbb41242b9f7abc0829863e2","sha256":"7c194aa36f7f31770cb08aebb57b0102ba13f4b80dd491b9cd17c43c19c515c1","sha512":"afb9de1885d444101599249c721e6a73142f00aa7f991141c87148befe643f3b6339a9c6b863f49fb91172a83bd0b52f713d7be0eb4864d64bc7a5645a42db7f","ssdeep":"","tlshash":"4a71652ce3a5e7bc6c6243e4467354b4aa4ed2de3af8c228d579c4e470721dcc088cda","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-07-11T08:11:25.360033Z","times_seen":30,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/93656207-026979d7449eab37.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/93656207-026979d7449eab37.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"227e3387bc13caa1e2f9a67b65766082\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsAuR4mkqzIadTLsbEKcwcQ712lS%2Fmw7J09Vz%2FGey3UprMoRji82p7IwYbnYwU9fUmWUyT%2BZfMn5fvpgtIcv%2FubxmQlOoQiEdD2fyBoywxVb1YKV6YhY3gBazXG9yREojVwT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a5fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126556,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"227e3387bc13caa1e2f9a67b65766082","sha1":"de67b5be5ad8105ce28939b6448c98b4ade43113","sha256":"718ba3e01f45f6de9d4b71e234115b64a12cfc38bf95e38908f05b351b482b1a","sha512":"0d5ea7bf826c12281c8698da62f2a65f8051c42baaa8612c1efbe43f50df05ff235ae4038f7209cc31b7b1dcfaf692f9a7ad647a4796f1245d5568ddd27c4eff","ssdeep":"3072:2nhbp2CB3MfQGSDBxVdCqbyD5dkJIP6+yBcnoL0nJT0wkNcuYPXEPs+dh1U0Jt9e:IM8q","tlshash":"69c3522cd749e27c1f8ac7a44b252438b94fc6de35e86629d62cc5e033671ecd199cca","first_seen":"2024-08-31T19:46:14Z","last_seen":"2026-02-04T16:15:09.798531Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/a29ae703-46d951b11c376d36.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/a29ae703-46d951b11c376d36.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"c464e6385b6375e40cf1573a91485a24\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZDlcDlaGwXPmxuSgdYJ5mRnJTQfnZLQyr7Suf8DtbJ8in9Ga3awEudK%2BCf2YG53uNg5w5vxBSH17On3SujjdkWT1sHo0aQfTgTigymlaTnC5n0d92ymCvul1uI1l92dO25k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76587b15c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58277,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58223)","md5":"c464e6385b6375e40cf1573a91485a24","sha1":"fe99a3a651f8c3aa992936abbba4f4caf727c34a","sha256":"33d5fbb9fc710664970a9bf82655410e3b9690867b55725c3b810e14e9245967","sha512":"d520d1515f5838a98b2fc8fd26f615990b2bca0c910b9f0968de553f834357e6ad152a4d7ad22306d2a45ed663b91645fe8a6eb28d2044530d5f1e64bf4c1a80","ssdeep":"768:u82gsyBfQ/pDBVAGJrgHO9P76d8N0VZ8UK/cxjMYTuHSGrrzcOOA:l2grfQxDP1YO9VN/bc9MO8S43","tlshash":"d04382ce3686b512676212b5483f040bf33e5d99680e4d1cf519d9d97c38cae827bbb8","first_seen":"2024-02-04T01:23:52Z","last_seen":"2026-05-09T10:00:35.447576Z","times_seen":81,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/pages/published/%5BdocId%5D-bdf035384f1ca788.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/pages/published/%5BdocId%5D-bdf035384f1ca788.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"96a1d27475054d4662b1184e0287dc0b\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BPFNVjYLhA%2BlFshqznHJ3WH57k%2FcBZ%2B%2BUTDQFDYKIuqUYfZTbzWxpm3PldKCmZf%2B1xMlLYf%2FHhifkYwAX91WMDJzqeC1yJuPOr2ZfwN42dt6SwI%2FmA42l7hGoDYRHRs1cVB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76588b57c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (904)","md5":"96a1d27475054d4662b1184e0287dc0b","sha1":"cb36de2ee881e44224876e180f623268ae302cbb","sha256":"acb869eba19fb6ff91159a115605c918f59aada83e0d77dd3a9ae4e4d880906b","sha512":"b822c5913c1c0dce5269e3cfe4fe07da6956150cabef285fc943b79b3750d54d174e2536b370198c882c0724e0f9a4fd0f5fd89366ce6dfaa2b5afa2f7bc950e","ssdeep":"","tlshash":"a1111069f5c1b8bc336b10ec0167280866de295b589ae681fbb444a17cf610e9223fc8","first_seen":"2024-09-04T12:54:42Z","last_seen":"2026-02-04T16:15:09.799655Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quattrocento/v24/OZpEg_xvsDZQL_LKIF7q4jP3w2j6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/quattrocento/v24/OZpEg_xvsDZQL_LKIF7q4jP3w2j6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://contato-whatsapp-x2el03r.gamma.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:14:14 GMT\r\nexpires: Tue, 02 Feb 2027 21:14:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 154825\r\nlast-modified: Thu, 04 Sep 2025 17:19:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35708, version 1.0","md5":"09af1f8b9aba5a46e621d7f9d4592fba","sha1":"7fe726baddbcf6134928ed3544f906517f76c032","sha256":"54b83dd2f9e82637d8aa5d4b7b75ac6f5a3b7af836ee05113cac634211bf51b3","sha512":"226df4302a7a6a22421141161ba400e5bac10c42d70885ec681f624e0d990d9c8aff10526bc48498afb11094e0fe390a864cd9449cfbcb521c7a4677d3782603","ssdeep":"768:FQhLTzZYrVKBmw+QzGa9N8zMvztJ3YP5YqdgQ/MDQK2seQdu:WhGKBntzG6HvzUP5XxM0K2se1","tlshash":"6df202a694022755386cf1ce2ee3d1151b09f8e7eafb46043688d3ac5451ddcc7caee9","first_seen":"2025-09-09T00:57:39.032064Z","last_seen":"2026-08-22T17:09:49.625896Z","times_seen":783,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/css/c5909dc245a8df8d.css","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/css/c5909dc245a8df8d.css HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"a487778ff2c464586ab5f91fe2ec6af3\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2BYBxEGydd0xWRQHue0yKL07j1pS5H18TdYsTjQhfHDQA40a4I5RgIxvrRIkJRN5L1r7%2FHSRI0lfqFsGI%2FEovGfnEZ3zsQ5qdIoWk%2Fs%2FXmojk9go8zCLI3k6%2BHutJcTnoPm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76582a23c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2307)","md5":"a487778ff2c464586ab5f91fe2ec6af3","sha1":"80bed6042072f26fc158c6897f48009203fce47c","sha256":"ad0c97ea0c35b6efb86523e0c15152b4c6c8f05a67b46655544610643a006629","sha512":"855714a556b684ff0ad8d73b7edb206e496113baafe8d1cb9c8b1b72af5127950e8101a982983b2a50d51aaee50588852d38239b76cdc2219729777998d3c87f","ssdeep":"","tlshash":"8e41fd91924c83ee6d33c3551ae07ffb3c4975179a81932ebea692b808c78e60538b10","first_seen":"2025-04-08T07:38:07.435355Z","last_seen":"2026-07-11T08:11:25.350454Z","times_seen":46,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/pages/_app-b447acfceb9a52b4.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-b447acfceb9a52b4.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"0e46348cf998f6d2290f89aa9be57d57\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 16:14:39 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMs%2Bqvl4xMHchGiJTdwGbPUb1gAssI9UC%2BmyaWlSol6EFOctVibdxVjTlHXK3hGr4r1NHWTYrK1Y52h%2Ban7lXUeQ%2FAbsqZNNyN3A4pLXixu1AbW%2B2NAGHfKz%2Bh7F0g89d2GZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76583a3fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0e46348cf998f6d2290f89aa9be57d57","sha1":"2e31b811c3b2133c9323b4d6c9b5f856d86abf77","sha256":"51eb608279b0745de9203a5e125b962d36cfa2a7bc9c051913522be16065164d","sha512":"aaa45f1f9419e1acc143c730e706ec22936d35e5e7f4f87be8e672703ebcc0960e6ea30d5401cc49448e859d434ed30d364962fd40d2c6e848dcd91cf652d8af","ssdeep":"","tlshash":"f0e0269d39f2bc2c2a2324bc00bb090e36be2e8a78cc95d49251b8c43c3181ec611d8c","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-05-09T10:00:35.428133Z","times_seen":12,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b13ba9de-11ef9f2e07c3e310.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/b13ba9de-11ef9f2e07c3e310.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"77ba712e60de2be24d2d93560671b41c\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GopZSjHrmVu%2FAdic3yDtZZNlgKA0IuRBrOugHRXCtMw8zG3BHFo3j0jeq73yfarEkbWYNOv4mOpWPgo%2FHCxLccTksLQO%2FdcKQJIIiCQ7EtSxf1IW6upwXANEGAdZ%2FFVbD%2B4l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76585aa6c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51099)","md5":"77ba712e60de2be24d2d93560671b41c","sha1":"336a010e60282dd1ff4355b3381832d329eedc6a","sha256":"add9014b6384d37bf29158c2edc82417804ae1b348e8e3eaf212db808d3437b9","sha512":"27bcec94c8fb245daabc5ebfa3d7bf273b6b5a26ff9d4378f484b74f421bd602f98b00d290cae8d164521ac567e0c96f0c0bb19628237126376c6bf2cb0f0e22","ssdeep":"6144:tZpt4ZbXUZuq2hQPw7X5E+CuzkkdHDkT1sZoW77PIXz3H4Bl/kNvEtq6JrVBluO:tZpepXUwq2hQPwj5VCuzkkFUW77O68O","tlshash":"bd644c72b259603dcaf8609a68be1a02f93b1e7a2546444cbcfcc4df914494625bff73","first_seen":"2024-02-04T01:23:51Z","last_seen":"2026-05-09T10:00:35.432958Z","times_seen":82,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/d08a6a05-d92448afdf309bb8.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/d08a6a05-d92448afdf309bb8.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"51a86ccc1c2dc32fb779f691f27bb54e\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY9uofnbWtgtUzjrGicye0NNxvitxI5Qvt3gO5rwCryl72SrVQfq2DLS9K%2BDmz6fHT81EH61ms7I6Uni7PXyUBgIMCU54MfgeXFbupj541srAfgNEIEOKdOxkJNOI8Z3V6A3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76586ad8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105417,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"51a86ccc1c2dc32fb779f691f27bb54e","sha1":"ee49e951d6c76935b0ca0607f522ddd859f53dc0","sha256":"790d44ec6c3bb367e106f3727947910a745191b36ce49853a2d6331c05902402","sha512":"0876dda514145af1b391bc944df597943a431a27d0bc93cc7e307ff17eb56fb12f296beda3902dab6d6e2d28947f5191748fb89adf6d713cba1e75d721e30b9c","ssdeep":"1536:e1slbLAgTNHWlI2VqyoyhrmGGqbgVn8RSUzjai2eGQzfw:RAewIGqyfFmnqb6uSk9Lfw","tlshash":"91a3d5d93281717757da22a818ff2005f2b7640998cd8094b93dc8e62db4a4e61bff7d","first_seen":"2024-09-04T12:54:42Z","last_seen":"2026-02-04T16:15:09.802798Z","times_seen":16,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/css/7f1bf32feb6a8541.css","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/css/7f1bf32feb6a8541.css HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"d06edd5eaaab8de8fb141eaa757b572d\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=19hFoWb6EddAcH0QECa4nNOTDBdix5MO0dMxbBY8UW4imCoJ%2FzRkwqGXtqkoTaRJqUn%2FoolLeRAs42I1rrw4VUmXbf2qF%2FhlscuGYbN2EzgNUcpTESxnnohH1mx8gDFBc88Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76582a14c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37973)","md5":"d06edd5eaaab8de8fb141eaa757b572d","sha1":"0281d6c0eb468ed6088bf120e47ede9a1ff2e28f","sha256":"c411b439f824063e47814f718baa1e7c81b3628d6274caa0cfbd4b19d036d9f5","sha512":"9ad4fd7d68d148bb926f11af6178fd3850e0be2ffbc990544542a99111ce9e61ceef91a912c8bfc0304bb6f4db510b1092589d87c42400b4b9ce807f03332bb0","ssdeep":"384:bwCM1MvMaMfMRQJrdQIDbckMPgefBEA4LiqRd2s3cnNU5o5Oc:HM1MvMaMfMRQtdNnL5o59","tlshash":"0e03130bf35a1a17b81a4d39b0ca17b469642e18f211c517b5add2618cc68bf039fbfd","first_seen":"2024-05-06T17:16:12Z","last_seen":"2026-07-11T08:11:25.434991Z","times_seen":21,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/ad54e6ef-6fc63f30e1d3513e.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/ad54e6ef-6fc63f30e1d3513e.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3c5d189484a1a54b25870c3f799bb94c\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wH9zm%2BxIpdOp7xAkCor60ghxrCWXyZCUaG7cqFkP5bjVv5RWXih6JbUEZWtbfOAoAFOgxWAE2VyM0gcNhrw8MScLsJfaqxbro3EpR61pcJTw%2Fp0aRQHfZsFPHjgbOtLYoXTK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a79c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27538)","md5":"3c5d189484a1a54b25870c3f799bb94c","sha1":"ed557119e5fa6cc3dc06655091cf62d173f0f15c","sha256":"1ca7d6b16c81888be70f7d0dfa9c06dd9ab36652de55c49a52f9868c467a1bbe","sha512":"d9e2d41f312918cfd1fe482bd34150f1ef2bd7d6303a26cec4bc529eac6a961353e43eb61552f12618f80dcc7446e2b40c6bc3d4d09d53d9ea456763aa511c20","ssdeep":"768:6JHjHqawzkCkmWJc3X0RGVz6Op20Mc4IQwZ7CDtemyLOm7DSaALf+yCMA7:/awVkmWJc3X0RGVz6Op20Mc4IQwZ7Atq","tlshash":"e9c2442ce295f37c5bd296b1c6223070aa9f46ed3af84658e67981e431771ccc1ddc8a","first_seen":"2024-07-30T21:24:56Z","last_seen":"2026-03-14T20:39:56.632247Z","times_seen":19,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/69bd6bf3-bc248ffefb750b46.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/69bd6bf3-bc248ffefb750b46.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"a7528aeb86b8e1d18462c9367a34f4d6\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhHfBktOguW8ZL7%2FSoB6KfRYLU8VWKYHMGtQpqgYkxW6KiJ6HEhRo%2FeGae2MG%2B0uUvwXB%2BdtpKtA3u3vfilaHCadJrmV4%2BFrtv%2BWHC7RY7OlW353kQ1DPtaZ6u1eB8IndKOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a7ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (827)","md5":"a7528aeb86b8e1d18462c9367a34f4d6","sha1":"9e9b62a2cafbd63713c1640d7460d1d820da4904","sha256":"a52d9f0ab3f6532d834404fe5486c1e9b385dffc8f4985bcc04a58242e19ae42","sha512":"2df8566487a5b63f03e9755313a949de690d9407329284e27bb508bf9558145a1398cf30f5eb4aa720e45da07fdefa7e8bd15458727ce994dab2998a63e1b63f","ssdeep":"","tlshash":"c4117d89f2f4bb101949147010a3b927a5fd3aaf348f94492a638490e2b195cc923ccf","first_seen":"2024-02-04T01:23:52Z","last_seen":"2026-05-09T10:00:35.446769Z","times_seen":78,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/8c469d57-15109969c63e1543.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/8c469d57-15109969c63e1543.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6e1be3fa5f3735304ed215cdf3f04421\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8gpi%2FnV3Y2WqwGmOFimDqdYvmVmGrCG8bROhVRSknO96M129htYRdNkxzqMd%2BipxKdM%2F4GHJh4lkeTl8gsqCUKpDwjS%2FtWw90e5LDpKxMK%2BvclTewYYwmZ2xfk%2F7%2BQWgS%2B5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76584a86c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6916,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6862)","md5":"6e1be3fa5f3735304ed215cdf3f04421","sha1":"87b6bd03357bb796b8a034d0c67270a95c73a405","sha256":"f6579e8009878bc443961c2d390c7517bfd6f99aca9818f04332e6587ec6f271","sha512":"b4d2be293eae327fb4b4299fa8a74d294578653b0aa411e55b89cd9e2d674fb790d666baadf1bb248c685df8840d45bd82655abcc449dbced93827e61ac0a6af","ssdeep":"192:h2YMPTiiSw7ZRTIB71s8Fg0UvAlTGUU7EI:h2YMPuiSupIB71BgFvAlivEI","tlshash":"39e1a6bcf7d4c2bc3d8467e6d9335038784f469a39b8c32cca59499a35735cc819a8ca","first_seen":"2024-05-23T07:00:32Z","last_seen":"2026-07-11T08:11:25.287309Z","times_seen":28,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quattrocento/v24/OZpbg_xvsDZQL_LKIF7q4jP_eE3vcKnY.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/quattrocento/v24/OZpbg_xvsDZQL_LKIF7q4jP_eE3vcKnY.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://contato-whatsapp-x2el03r.gamma.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:14:14 GMT\r\nexpires: Tue, 02 Feb 2027 21:14:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 154825\r\nlast-modified: Thu, 04 Sep 2025 17:23:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35960,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35960, version 1.0","md5":"20479dd3f845d10a9545743e2203f2ab","sha1":"aba5c2ff79e23d8344c96d4a8df90a10eb5d2e3d","sha256":"f71000f0e9157888653489c1eefb6750a257ae7ced7dd208053fd1094919ee39","sha512":"daf2c12317f77b97de3802312d53915a86ee3198aacbcf7bbfe893d636417a72edbfc3f6ecdf807239ce2b261591137187ef5e32e5c086f7091489fa4a90a8c0","ssdeep":"768:IenoY3l7/zvB9/uOUiEajniZZot9MdF+LMY1waXdPpfTIm5C/0B:I1Y3lrbBQOjpjniZiziE1xlIm5bB","tlshash":"04f2f1105b4ea19fdbe7bded92c3a449c5316cbeb8701931a7d67c9e892208e4714fc2","first_seen":"2025-09-10T23:56:34.587656Z","last_seen":"2026-08-22T17:09:49.617371Z","times_seen":644,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/3d35b88c.5eb21de6aa3a739b.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:41.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/3d35b88c.5eb21de6aa3a739b.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:42 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"809b136ceef0762d5c9d0bfb4b6d14c9\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 16:14:41 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mw8G3aXntmKjIaNoyDH3b2NuFY3ZsuIxoM3bDJe%2F6kQazl24GYDyLaRd9QKmomsWnWfDDsh2wGUMnXNaLg%2FMS7z%2BT4ZW0yhFALzcCGxkNpC6skOnq%2BgY2Vygiuieu6pnUqQe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b766579acc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147086,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"809b136ceef0762d5c9d0bfb4b6d14c9","sha1":"7503c9fc761a797f7ae9c0fc3099dc3866d564ea","sha256":"9ca43560cd5e46d126902b8bf5f3c247bf7da9e31549ceb706a9f0045315e29a","sha512":"6d687ccfecd92adfdef3aab143edfc05c20967ee75aace0c361cbb2ff2facd3193ca85a8d589182213576281f174426973d920e0a0c2989480293114afddde27","ssdeep":"1536:la5l0HMDu/4m7Z8qnqJrjFtHQwtXJvq1Zv107DXIOX+z/CZBGEoQfxvysXs26mUQ:D71qJrjDQJT6TZb","tlshash":"0ee319e6b290307e55af04aa506f0005f3787d987c0b44a5e6bde9913db4e8d52ebf38","first_seen":"2024-07-05T15:23:05Z","last_seen":"2026-02-04T16:15:09.807078Z","times_seen":21,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/framework-0ac6491e82269c86.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/framework-0ac6491e82269c86.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"750ff53125589744720af29f6a6ee485\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHxKiyo4xDXL3yFdGLx5Yj9fGRhdbHkhZeixWQ9xZ8Dm1bF1gmXFiZmrwEygj%2FEUvD6T6opTTAM%2FqTiRQQdbSkDOBFLVj4X1qyPBFUp7L1xkDpCGJBe2SSIse%2BgyZHYFfsj1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76583a31c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65200)","md5":"750ff53125589744720af29f6a6ee485","sha1":"a8e2b86f77fbf34e7769efed03cdfac3ffdfc3c9","sha256":"659b25c04e45244601c3fd16aaab4aa8a25b18f915a08e8d2c83b402841ef710","sha512":"513bcd8552685638b6227b096ccd0c42b14e8c9277b2f5bdc6670deba9e8708814604850e7f1df31d0c8b6e77478d9f3ce6793d23a0ec120f2da3c323e8211a6","ssdeep":"1536:MEv1NH6ZMumPhxj3hnpR76oedCWyTDJqQ1:MEz3pp963dEr1","tlshash":"08d3f9e83995f6526ab311a700ef1803737d2a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2024-03-12T16:19:21Z","last_seen":"2026-05-09T10:00:35.454544Z","times_seen":54,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/9b583bcd-17d841bbd10b7965.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/9b583bcd-17d841bbd10b7965.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"d76c7a0769226f9dbd519da1b81a482c\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lehMExCeop%2BJyO2eHgj6FCkjuqOhq2qm9%2F%2F3ZMR3Ufn3rp8N53ibW7K92%2FiJnWm3r3aLJZMUjxUWStjg3M%2BY2GkEajFkqmQox%2FskLRTAr6%2FLX0q5pdCUicwNjD%2B3ST64AhY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76586ae5c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55278)","md5":"d76c7a0769226f9dbd519da1b81a482c","sha1":"1bf9a8c114fae8edd63592aba7a730f06a5575f5","sha256":"1e630e3455af6829ddfcecb1d553c60dec5c1c106017017083762494b9cbbe60","sha512":"001faa7c250b5859e9f72068b68683ec20e2a071e1f5a8e268bf93e4f204c8f66b76f15ab54057ae1a8b119d0249274927a84fffc8c4c504bed8c9c3141a43f2","ssdeep":"768:wLTiRr9zc8OjmrLCXrcEqOsNc8jvUAKIrz5V+Ni9IkRvldamtyzQ:OiRr9zc8sOGbcEf6cu/7IkRvFP","tlshash":"0e43a789fa60725203d3e0b9e13f552ff331696a651d0570a242ece93ca528c86bff75","first_seen":"2024-05-23T07:00:34Z","last_seen":"2026-02-04T16:15:09.808391Z","times_seen":10,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/802SgFFHuD6M2O3lxgcWf/_ssgManifest.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/802SgFFHuD6M2O3lxgcWf/_ssgManifest.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"04987fc48c39f077c58c57c1c1245e1f\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Ask5NEpd03u5ZnLf7rxGOjghl3ifJe91EKe8JLeFupHc%2Bq7%2F%2FHBEi%2F3DvJ0EGKMbEXp8O0Uk2KqsmTQsZbwj8FMl8JGtfvyepeic%2FqVr8v80X3EqBHVg8zIVtxfrMBeCovu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76589b76c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"04987fc48c39f077c58c57c1c1245e1f","sha1":"efcbd2d0af83012f60f00897348f2cebe14e5eef","sha256":"0b866dd2cc3bf9a30f5485524381c26afa77adf4462bd6754bb16fbe2fdc3816","sha512":"9c61d606d0c4684938a2f4cb62fd167fb52dd31bc62dfdc8b4e25b50578be81f5b1af01d12262437c63775f55b7fbd8f4e9b63a0b3a6a7c8830f0454d9ba3504","ssdeep":"","tlshash":"9ec04c91e56cfd249a6bcc191eb29b128f92a256d1ec955385ef1205c8651020b01d90","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-08-22T12:51:36.394428Z","times_seen":321,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/media/GammaLogoGradient.43edb67f.svg","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/media/GammaLogoGradient.43edb67f.svg HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"5c1ad4e91ee7cc8136fb71e8c298f940\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1585wfUwNlxuDS61SUSogxguYqn8lzT9Fwh3F17CXn4sP2S2GuyFdfT%2F%2BMLK4m6ZGw%2FyG1UaSfd%2FrvBgdgKJ3BsVM8pQrV9Kh4j0cDq1yL5Ag0jQ0Ee2E0GuhXX%2BSorpkde%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b7658abacc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2756,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c1ad4e91ee7cc8136fb71e8c298f940","sha1":"9fd010ccfcf200cc4e0f3fb0ea9bdab42e1ed210","sha256":"43b85735fc7daae6f4285f0579a09e6428b54ec7d389feda5b6ba1f00a68a909","sha512":"73c93fe4cb8adbda53eb4211e57860abe1a7790a4e0af131d5ccaa97692964ced68330664a060cf9799079a7c167f80d947933616a180496ad4e5afc1e3e5b8a","ssdeep":"","tlshash":"5c51e07ad7596c37f22bc2ecd790541bd154a98af54183b9e8e0b71f2b784c7094c760","first_seen":"2023-10-26T19:06:29Z","last_seen":"2026-07-11T08:11:25.354062Z","times_seen":21,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/91bbf309-aaf9ef7a7a89dd3c.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/91bbf309-aaf9ef7a7a89dd3c.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"dc27350b2868a506730d605f9dcf688e\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6HON0h7qrH5w9et2%2BGr5QhKl6rdxCFhnxW9cXJQgIGnZWD%2FqiCgNTd%2BxVFiVqjzJHAho9TJDhIFyUVMR2FlD4W5hjiGHBjnsmKePZiNU%2BImuuA%2BrePZ7tdF5hY34aS4yKRD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76585ab1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59370)","md5":"dc27350b2868a506730d605f9dcf688e","sha1":"b2e1683987a48a1fb90bf2d3512a608f06d3e45d","sha256":"1b3f34deacf964fb3bfae7e6d451c37cad9d38d8b7e15661d0680047155ef787","sha512":"ea8b92e3d9a3b87016a5797940e17b1a94e483ba84f083ec788879d2637e3b6e16b9b51116948137df6aed07694dce71c18a5edaf9504ca5c00858aed65a4209","ssdeep":"1536:7/AsMHFLE2SzHY4wqAE+TnQ6PK8AfhLiITGv+:7ozxE24HYlqhKqZR","tlshash":"234374653372e47287f856abc4718802f73ea5a65807153cfb2c7dce28a865761f9b30","first_seen":"2024-05-06T17:16:11Z","last_seen":"2026-05-09T10:00:35.440569Z","times_seen":12,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/b779bb5e-2a65d4e63e363ec6.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:39.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/b779bb5e-2a65d4e63e363ec6.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:39 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"0f7cb8c930cabf410f149b1b7393cafe\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:55 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46963\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdtQL7dIYob%2BlojcJVouzVV2ZB3YX1g9QKXmVD2S%2B3CZMAkM4zrHmz%2BtbqB0vY0cQXtVZnoGvqK4GI3IL58EkEghIaj%2F4J97RC1Dcs3oOBDTTm7IZf0x2cKynEcFiHqu09zz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b76587b08c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60549,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45065)","md5":"0f7cb8c930cabf410f149b1b7393cafe","sha1":"7a4c5d7e815768530b65d11ac0efbf0d83428ea3","sha256":"3e5110241fad8929050026195d8690c08ca7ae1ec2dc5093a524890e72288c43","sha512":"d4ae399871c2ab8a76e7686286847b87ca489b67a8adcda8871b43b3b0ee00741ecc8638c627813b988d4fc2e70ebe171a2c7885d502b7a3310a24ce2351ac4f","ssdeep":"768:FVG/Xy5a0omBU6s+PUJPsLVMoS0L8hOpo2+zpFJTNs5DokewT0wmvsq8R8MSxivJ:FVyQdFi+n9IhX7JThKTmvsq8RU06D8","tlshash":"8d43d9da72ea722197ae9096d46a0500f33d5a99240d403df1addceb7c69104e3bff39","first_seen":"2024-07-19T17:51:41Z","last_seen":"2026-02-04T16:15:09.811688Z","times_seen":9,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/880.44d903249b768214.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:41.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/880.44d903249b768214.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:41 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"db7c24fe499b93d22ea3fd5fe10a5105\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:57 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46964\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7I8f4GSn2sDgbAlXb9n6Uzh6%2B6T%2FWjE9HXhCvHcSzUcMoHXKhwBGT2P3pqsQxKRZgiQBBXqcKjcI6jp%2B912U45lyOJ%2FSP61adxXcZZ6RsMVY3lSLOyVoTtBpTKdS8hGkju0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b7665188bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9132), with CRLF, LF line terminators","md5":"db7c24fe499b93d22ea3fd5fe10a5105","sha1":"d6909c1d392017f5baaeaa324cfe60f73a8d1c03","sha256":"e1f4d494d0efcc0b17af205ea3f6f1020d062ee304d7eaeb900e4df00bc002f0","sha512":"df23757fbcddb799069b43fc2dc3ce4c856389094321dfb56804446e96a942baa1f247a03413b6205284cd00b130fee2c779af809dbb49db2370e6fa4680dd2a","ssdeep":"192:c/WHSg0Zs3kAUe6lS14sNAgy+ER87hWHKMF3dGmsBiDtGalq/oa:c/zg0sl6lS14sM+Ei7hWxIbBiRnlq/oa","tlshash":"982283ceb5a03c3252a665d0051f13ceb36a255a700b55a8f069f8c17cbd64f5a3bfb8","first_seen":"2024-02-27T07:29:06Z","last_seen":"2026-02-04T16:15:09.812605Z","times_seen":82,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contato-whatsapp-x2el03r.gamma.site/_next/static/chunks/7413e8b9.b6405c2f1c174004.js","fqdn":"contato-whatsapp-x2el03r.gamma.site","domain":"gamma.site","tld":"site"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contato-whatsapp-x2el03r.gamma.site/","date":"2026-02-04T16:14:41.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamma.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 04:03:18 GMT","end":"Wed, 15 Apr 2026 05:01:44 GMT"},"fingerprint":{"sha1":"35:66:9E:BF:3E:A5:D8:9F:62:29:04:F7:CA:69:70:33:CA:80:F1:95","sha256":"BE:94:02:98:82:7D:85:90:C0:B6:EC:14:71:A2:87:FE:12:FD:FD:85:BA:5F:4E:71:58:9F:4B:CE:64:C3:DD:40"}}},"request":{"raw":"GET /_next/static/chunks/7413e8b9.b6405c2f1c174004.js HTTP/1.1\r\nHost: contato-whatsapp-x2el03r.gamma.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contato-whatsapp-x2el03r.gamma.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 16:14:41 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"e3b3bcfb0d2f6aa7dd7dd907bed97e2a\"\r\nserver: cloudflare\r\nexpires: Thu, 04 Feb 2027 03:11:57 GMT\r\ncache-control: public, max-age=31536000, no-transform\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 46964\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oR15jSZV2HqGqfYbM9mvnjop%2Fp3sSOFA5cAYcJS%2BhlB5k4TPkhaFLLHvmE3DbfcF0FWewaeSublNcdjMcm17TjElfQN%2B29XA1wU%2FQGJndPk6Xm19f54FBg020fzt8gQ6ERpf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c8b7665da88c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"e3b3bcfb0d2f6aa7dd7dd907bed97e2a","sha1":"4d0b314081341f92a1294b024474186438ad327b","sha256":"cea039fbf6b021f768f230f5b3231f89dab96a883bef4c0dd173fe415244ca1f","sha512":"097ed3eeec0b1068032ba47077ea70856f890e69be055f0d8d39beddc49ed339631056537be0769adc35611ab784bdab1e24862df55a53e0cd6d1ffd7f6d87b3","ssdeep":"768:S+fad5jk3iBOVuKIb9z08YmmehpTakIw1p3SwAjip9GTVxrg8T65y381GEQmKL:u6y9g8qw2w1p3Sw2ip9kg8Tqy381G6KL","tlshash":"39736cbd7724612809af4be9e2bf481473bf251d1800465cb36d88f566949ecb09ffb8","first_seen":"2023-09-04T01:05:15Z","last_seen":"2026-02-04T16:15:09.814869Z","times_seen":203,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-04","alert":"Phishing Block","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"contato-whatsapp-x2el03r.gamma.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}