{"report_id":"ef7c8105-dda9-4bc9-9ba8-4c0178e714b8","version":0,"status":"done","tags":[],"date":"2026-07-14T12:50:56Z","url":{"schema":"http","addr":"voic-whatapp.com.cn","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"2606:4700:3034::6815:136e","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"voic-whatapp.com.cn/","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"title":"WhatsApp網頁版 | 免費在線聊天，無需下載手機版","dom":{"size":13320,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e3a75e251fc42e92d77e18ca89b70962","sha1":"2fec4d1e12142a3e2ad2cdcd14417968f0531296","sha256":"ab6fe98df63afa984df0ee50a6ee9e1e35882293b6c6bf003c91d9c56c1b154d","sha512":"5fac557873dee66feb4eea3c4769f10c8bb2753155639c0464a3651f621539645aec4a2bef702b1f034bfea640fc2e0c8a01e5c8d9304d793e0d2528eca8633e","ssdeep":"192:w6++3UmNHjbKGBuppt82GBoXM5xxCD3glYkw4UEh3WdLPRo1MmxfySKRACiNXHYv:w661d30HkwdNuH","tlshash":"de52309baa2704467e13a9786f7727455278d007c009ddbd3ecc625ccf852d86de2b5c","dom_hash":"domhashf7c50af31113e52176ce536ffd691968","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"voic-whatapp.com.cn","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"2606:4700:3034::6815:136e","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T12:50:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"voic-whatapp.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jspassport.ssl.qhimg.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-02-17","domain_rank":1516168,"first_seen":"2015-06-19T07:16:50Z","last_seen":"2026-07-11T19:42:44.089092Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"voic-whatapp.com.cn","ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-14T08:08:49.505872Z","last_seen":"2026-07-14T08:08:49.505873Z","alert_count":9,"request_count":3,"received_data":45566,"sent_data":1566,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":10316,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"voic-whatapp.com.cn/","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d32726310a9f467a54930d28a68e263","sha1":"bfdee3fdd9f6aff7b4370e85b66be147efade967","sha256":"92a56f4888d403707d5934ebcf6c2a3de518de1b3ae7ccde24141a761f03b8b9","sha512":"c2e3f21926856e0e621b28a79081fd6f15b9e3d9a72af2e99a5faf9beae8c36e8a54efcd499abb0095ee91960547c4c33a9f73c42878afe31caf695a4e173c83","ssdeep":"","tlshash":"3be068ae6cb616b0379104ba442ff918f29a517c1044d603b598fc125820eeb4f2d9e4","size":376,"data":"","first_seen":"2026-07-13T17:58:51.596677Z","last_seen":"2026-07-14T12:50:56.933386Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voic-whatapp.com.cn/","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ecc393379527fdd6810fffa189ae644","sha1":"d745cb5703533b558276f1adde9e0d91041ba5d9","sha256":"1cc0d00fb09b7d4258ad0241304e7021030e32b4054fed8ddf18e12f09bd53f5","sha512":"9ba493e3bfe6d9ea0dc7153b7b34e456707f97c5d3c3ba264662068a38e560b4d4e074eef65d62f3fa2a510d8fac61f4f5970b1f631f7c347164f6c2bec36c13","ssdeep":"","tlshash":"86c080b56c7f7f55036691f7143dd51c4cfd001c7c86d60405f556052f5539c14068d0","size":177,"data":"","first_seen":"2026-07-13T17:58:51.599661Z","last_seen":"2026-07-14T12:50:56.935033Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voic-whatapp.com.cn/","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd02fb2d4259ba2f896c1f41ef820731","sha1":"63b2644fae18854d3b11c87a8a00d1037e676171","sha256":"40192c69b19f7f549b7ec399a654087194172975d0dcac47c103daa209e05268","sha512":"c01ec408e4f3e87f57cdb52b172daa39a12979e8794ecda60f5ac972ae6794453bf9a30313d649ae5615cefb296660cf01c949c5379bdae9c1e29d63ba704a59","ssdeep":"","tlshash":"5cf00234eb7348b40c2336ade71f2680fc9910171404d582f99d485cbfd0c55a691901","size":618,"data":"","first_seen":"2026-07-12T01:18:29.097413Z","last_seen":"2026-07-17T12:29:24.939527Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jspassport.ssl.qhimg.com/11.0.1.js?d182b3f28525f2db83acfaaf6e696dba","fqdn":"jspassport.ssl.qhimg.com","domain":"qhimg.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://voic-whatapp.com.cn/","date":"2026-07-14T12:50:21.924Z","timestamp":1784033421924,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /11.0.1.js?d182b3f28525f2db83acfaaf6e696dba HTTP/1.1\r\nHost: jspassport.ssl.qhimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voic-whatapp.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T13:40:27.954169Z","times_seen":17315391,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"voic-whatapp.com.cn/data/favicons/site_6a534b19b06e0.svg","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voic-whatapp.com.cn/","date":"2026-07-14T12:50:23.179Z","timestamp":1784033423179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voic-whatapp.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 06:43:36 GMT","end":"Sat, 10 Oct 2026 07:39:36 GMT"},"fingerprint":{"sha1":"80:86:57:45:DB:DB:CE:70:E3:24:1F:97:10:C9:2D:98:12:38:8D:AC","sha256":"97:1B:A2:B5:4A:5E:8D:AB:23:7A:17:1E:B8:C6:9B:B4:E1:A3:51:8D:04:49:5C:6A:24:69:85:D9:05:37:C3:76"}}},"request":{"raw":"GET /data/favicons/site_6a534b19b06e0.svg HTTP/1.1\r\nHost: voic-whatapp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voic-whatapp.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 12:50:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 12 Jul 2026 10:48:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a537108-61b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E62PTgkvvWFKT9wKYwTAoOs2ekhRvHO%2BImQtfdfYBsTAi4g0D5pT%2F8Gy2McxleLKCBv8%2BHUDoqnpXz%2FiLJHNX3DQel%2BDRtwL%2Fy5XjVpzayg50Eg4GruUrLPqi87RcshWkdMc9DTp\"}]}\r\ncf-ray: a1b0a71eec17b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":1407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f181b430b2488a6f45a3b39350a238d7","sha1":"5c8178a22a405e68c3284c10726f20fc56254e6e","sha256":"3d529d65fb07d0f7f9649ed23d9f120364119f145387201316bd80a77051dc6b","sha512":"8d8b4c7e55118c22a9b6bb19ea53b1cc016647f6f53584c5b7dd0071032cf86d3b3c1301ca301ec59c9a775ae401fdd3c1980966befbc3a79825abce16ae1fbe","ssdeep":"","tlshash":"1631cb28a5ed6526c90a020deb06a8663f1a15c39f648245344e0f7cbf52bd3bc972bc","first_seen":"2026-07-14T08:08:59.882175Z","last_seen":"2026-07-14T12:50:56.929768Z","times_seen":3,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"voic-whatapp.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voic-whatapp.com.cn/data/favicons/site_6a534b19b06e0.svg","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://voic-whatapp.com.cn/","date":"2026-07-14T12:50:23.181Z","timestamp":1784033423181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voic-whatapp.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 06:43:36 GMT","end":"Sat, 10 Oct 2026 07:39:36 GMT"},"fingerprint":{"sha1":"80:86:57:45:DB:DB:CE:70:E3:24:1F:97:10:C9:2D:98:12:38:8D:AC","sha256":"97:1B:A2:B5:4A:5E:8D:AB:23:7A:17:1E:B8:C6:9B:B4:E1:A3:51:8D:04:49:5C:6A:24:69:85:D9:05:37:C3:76"}}},"request":{"raw":"GET /data/favicons/site_6a534b19b06e0.svg HTTP/1.1\r\nHost: voic-whatapp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voic-whatapp.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 12:50:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 12 Jul 2026 10:48:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a537108-61b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8uyasIhDKYquBVuflOGkGu4U6Coihk1IR2jyNaSF9YLyxGnFNavY7Uy5jQzbINERCdHRpxub5jNy4jO79y9eZs5Le6Cavlj46SyFlVbX8ekHjuDi3776HN7qrwIscM5UpC6cyda\"}]}\r\ncf-ray: a1b0a71eec18b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":1395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f181b430b2488a6f45a3b39350a238d7","sha1":"5c8178a22a405e68c3284c10726f20fc56254e6e","sha256":"3d529d65fb07d0f7f9649ed23d9f120364119f145387201316bd80a77051dc6b","sha512":"8d8b4c7e55118c22a9b6bb19ea53b1cc016647f6f53584c5b7dd0071032cf86d3b3c1301ca301ec59c9a775ae401fdd3c1980966befbc3a79825abce16ae1fbe","ssdeep":"","tlshash":"1631cb28a5ed6526c90a020deb06a8663f1a15c39f648245344e0f7cbf52bd3bc972bc","first_seen":"2026-07-14T08:08:59.882175Z","last_seen":"2026-07-14T12:50:56.929768Z","times_seen":3,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"voic-whatapp.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"voic-whatapp.com.cn/","fqdn":"voic-whatapp.com.cn","domain":"voic-whatapp.com.cn","tld":"com.cn"},"ip":{"addr":"104.21.19.110","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T12:50:20.529Z","timestamp":1784033420529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"voic-whatapp.com.cn","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 06:43:36 GMT","end":"Sat, 10 Oct 2026 07:39:36 GMT"},"fingerprint":{"sha1":"80:86:57:45:DB:DB:CE:70:E3:24:1F:97:10:C9:2D:98:12:38:8D:AC","sha256":"97:1B:A2:B5:4A:5E:8D:AB:23:7A:17:1E:B8:C6:9B:B4:E1:A3:51:8D:04:49:5C:6A:24:69:85:D9:05:37:C3:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: voic-whatapp.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 12:50:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BLC6AIYDycEu0VjzbmgOAKRyaT2f07pLn%2BXKXYk8UbLOdFpOkd0aFnRcSEOw3GDfbKWbTkLVjDPrfnhnj6DTnOTUSYg%2F%2FCWQ3uy2BY2kRQpFuh8PFVDiYRMHb3PokpyAyNIFSE5\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1b0a7106a06b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40414,"size_decoded":9222,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (789)","md5":"d29a9bab012e6e95abda23df3983b121","sha1":"7eef216295a3d5a6e026d0b708c959cad8d7d04f","sha256":"dc84db6741dc9d831bfcf541ddbd57eb01b7ef14ef5ed54464a37e02d963f605","sha512":"87b189be74bd2ff69baf5c006987a2841d0a145cfc2bb1b6a461418461317024b68180739d048f642186c1272ad78f66385592afaaaf31c83e5eb262d32f84d3","ssdeep":"768:Uz1d30HkwdgM883MYkOCCZoCCAgHkwdgRCCwFmICCdmSCCr40CCYqyCCa7M8834q:Uz1eHpdgIMYNbZobAgHpdgRbwFmIbdmT","tlshash":"2b03d667ca7318573523d0a86b77bb4666a4c413c00dc9787bdc165e8fccaa4b86378e","first_seen":"2026-07-14T08:08:59.892236Z","last_seen":"2026-07-14T12:50:56.931063Z","times_seen":3,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":321,"connect":11,"send":0,"wait":486,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"voic-whatapp.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"voic-whatapp.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://voic-whatapp.com.cn/","date":"2026-07-14T12:50:21.805Z","timestamp":1784033421805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,400;14..32,500;14..32,600;14..32,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://voic-whatapp.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Jul 2026 12:50:21 GMT\r\ndate: Tue, 14 Jul 2026 12:50:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9632,"size_decoded":1424,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c2465322fe6108a78bbef5da8d939124","sha1":"816122f9425fb10fba68998429c93fb16992e36c","sha256":"d8ae88b958facdc4b6b9e73922f8b9d9472e4938a4be328d3a9e70ba820bc262","sha512":"1bbbaa9885a0ad5188b4472b0388fc58c5e7345d2b1a24dc82196fea54ed15837747b40803e4810a86231cb55e40e98a4145d2dcd3cfc1b39941270473e693bf","ssdeep":"192:93N1aj34wfDg3OWJj3/Xf8Z3rTQj3i6flq3EM3j3RpfGN:BskLaiY52","tlshash":"54129c91006be500af431dda23df7e365d8e15566082d57e9bfe1cc55ceed22032878d","first_seen":"2026-01-28T07:57:49.134233Z","last_seen":"2026-07-17T12:37:17.277216Z","times_seen":377,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}