{"report_id":"f3818ba3-75e3-4719-acb7-5b8384da08ec","version":0,"status":"done","tags":[],"date":"2026-08-31T07:43:06Z","url":{"schema":"http","addr":"whatsapp.dir.com.my/","fqdn":"whatsapp.dir.com.my","domain":"dir.com.my","tld":"com.my"},"ip":{"addr":"129.121.72.72","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"whatsapp.dir.com.my/","fqdn":"whatsapp.dir.com.my","domain":"dir.com.my","tld":"com.my"},"title":"FREE Sent WhatsApp Message Online","dom":{"size":992,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ed8b41864e597c0c04ae4eb0bf407d64","sha1":"ff075ab458003ea77553cbd84f4de161f7b89c67","sha256":"caab2a9231cf6d74c81c386468218d3c312ba957918864335d796953a52dc7a4","sha512":"88917f6392623edb94d1bd2afa17446eea82a9673ab91e3f5c737ec382d4dda5d98ac23d1c210ec569dd59643139049a43e4844a55507537a98b94ddc28e2ed4","ssdeep":"","tlshash":"e8119c6351623d18cd4261686a9179400ea1d6378e187ca8754e726bafc4ec0e7a33ed","dom_hash":"domhash0575990a805847fcf30612e80adee361","first_seen":"2026-08-29T21:51:39.434946Z","last_seen":"2026-08-31T07:43:10.610938Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whatsapp.dir.com.my/","fqdn":"whatsapp.dir.com.my","domain":"dir.com.my","tld":"com.my"},"ip":{"addr":"129.121.72.72","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:43:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"whatsapp.dir.com.my","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"whatsapp.dir.com.my","ip":{"addr":"129.121.72.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T07:43:06.591105Z","last_seen":"2026-08-31T07:43:06.591105Z","alert_count":6,"request_count":2,"received_data":1606,"sent_data":1002,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whatsapp.dir.com.my/","fqdn":"whatsapp.dir.com.my","domain":"dir.com.my","tld":"com.my"},"ip":{"addr":"129.121.72.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:42:28.667Z","timestamp":1788162148667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.whatsapp.dir.com.my","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 09:07:28 GMT","end":"Wed, 21 Oct 2026 09:07:27 GMT"},"fingerprint":{"sha1":"E0:11:BA:04:D6:1C:36:DE:7F:09:CC:DA:11:21:8C:F2:2B:A6:14:B4","sha256":"BF:C2:37:6F:F8:CF:1C:AC:2C:B7:5A:5A:8E:54:AC:5F:50:4C:69:B8:4E:13:66:9A:60:9C:D9:27:FD:E3:D1:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whatsapp.dir.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 31 Aug 2026 07:42:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":969,"size_decoded":1097,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"993224b03687bbab322b663e078c4dab","sha1":"630a75a448a752303e8ef267fbcd777467b76e1a","sha256":"bd99e60a4b5cb51c2393247ed675085df8840acc85bfff5cc3700850f07bb838","sha512":"860c57d6ab4f011c7e49f12a2d8f332a09a6666ac803065e49a38ff931754b34c8c087357e8088ce5c7179e067b3c21eaa29930860f6e9504bd6fb2f0c2d5fd3","ssdeep":"","tlshash":"5b11e72355e23e14cd826124799175010ee0d5374d043ca4758d626fdfc0ec0d7a33ed","first_seen":"2026-08-29T21:51:39.440226Z","last_seen":"2026-08-31T07:43:10.618923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":0,"dns":502,"connect":101,"send":0,"wait":106,"receive":0,"ssl":208},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"whatsapp.dir.com.my","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatsapp.dir.com.my/favicon.ico","fqdn":"whatsapp.dir.com.my","domain":"dir.com.my","tld":"com.my"},"ip":{"addr":"129.121.72.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatsapp.dir.com.my/","date":"2026-08-31T07:42:29.861Z","timestamp":1788162149861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.whatsapp.dir.com.my","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 09:07:28 GMT","end":"Wed, 21 Oct 2026 09:07:27 GMT"},"fingerprint":{"sha1":"E0:11:BA:04:D6:1C:36:DE:7F:09:CC:DA:11:21:8C:F2:2B:A6:14:B4","sha256":"BF:C2:37:6F:F8:CF:1C:AC:2C:B7:5A:5A:8E:54:AC:5F:50:4C:69:B8:4E:13:66:9A:60:9C:D9:27:FD:E3:D1:01"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: whatsapp.dir.com.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://whatsapp.dir.com.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 31 Aug 2026 07:42:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":509,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-31T12:22:35.256878Z","times_seen":60350,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"whatsapp.dir.com.my","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"whatsapp.dir.com.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}