{"report_id":"f5362835-3890-4c01-a4df-8c4f58588785","version":6,"status":"done","tags":[],"date":"2023-12-05T08:53:03Z","url":{"schema":"http","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"title":"WhatsApp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:02:53Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ws-b4m.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2023-10-19 05:19:32","last_seen":"2023-12-04 12:07:10","alert_count":39,"request_count":13,"received_data":963561,"sent_data":6187,"comment":"","tags":null,"fingerprints":null},{"fqdn":"web.whatsapp.com","ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2008-09-04","domain_rank":2039,"first_seen":"2014-12-15 18:00:45","last_seen":"2023-12-03 23:23:04","alert_count":0,"request_count":3,"received_data":15245,"sent_data":1422,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/video.png","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/ws","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/ws","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/stylex-2d46744708947781f1f33a0069cbc308.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/qrcode.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/bootstrap_qr-e2b403f65ed52d327e90.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/bootstrap_main.9d6050e3d2fff5b782d3.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/jquery.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/jquery.cookie.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null}]},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/qrcode.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-11T19:58:27.428368Z","times_seen":72650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c14012b69be5585b1d650561aad0bd9","sha1":"d936e498b604c062077a0de23052099aaf129173","sha256":"5b129254c11091dbf4182503f0e757807da35a208ad8cb18d9225da8de932d82","sha512":"6e1331e6fe3a72a39e98a6c054fa7a39be775d1e5298e34cd1506a0de34c64f68c6ca1a453bfecd980ac47de1fc9173cf56a50347b02fbc7eb332b8eae9a96b6","ssdeep":"","tlshash":"8451dd50e79c354c84b23028982e21d8653c593a0c62dc7abf64a770d8d8d6e633bf3d","size":3147,"data":"","first_seen":"2023-10-12T01:58:00Z","last_seen":"2024-08-21T05:00:11.364488Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/jquery.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f24f23b859cf718282e3806ed5ce38","sha1":"c92a61cb4fbc23adb05973638f60e2999bed4a26","sha256":"e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240","sha512":"84b7b499ab6fc2deb2a2539f011a7455a5220532b181d372489b4a04facdf0c17588051b746c184f92da77c4c972366b9d1390555292e5e54caabedc03f3495f","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFn:qGsKXlI2p0WPSbDrstfak","tlshash":"2893f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93099,"data":"","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-09-08T18:12:34.045975Z","times_seen":1656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/jquery.cookie.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"19c1792f2450cad33de3544df3b706bd","sha1":"6aedebeeb22958e76df928cd7d81a66883bbc0f1","sha256":"55c173330e36aaceaf268be4fe4421376a4e9eab4ce0de8e32aeb1c75f1181af","sha512":"58a2c5719a67071eb2b28e200dcacc0dd4e7e72357fed0525e425e8a7a06bfee528a36de5e9fdcb1597d3e7481c4f3a1e120ae183925105fd9808e9948b1bf1b","ssdeep":"","tlshash":"40611f6134fd223e0d9b6bd5276f0468b83ffe70b02406448426bd90286c862dba7c5f","size":3120,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2026-09-05T19:38:00.920656Z","times_seen":1406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"deefe3584f843823c7ebbc5e90b08e4f","sha1":"9b7be0560fb73cd4a6700f764ab2ba0876303390","sha256":"7f5ae233b75e4afc436db0428dbfc7fef1aca3005b3c07b3a83583ff42a5582b","sha512":"aa578c1d35a80f81c2ca6c383a757dcb68f9ea2aa39c444fe88f9b1a3b0c50d99d2317df76bd15c96e35830f3ce7dd3f7abd2ef382a9deb8fa053d9a5bf658e1","ssdeep":"","tlshash":"6df0e57a77170b1190b424a6354b6d9caa7b776292e4a120f6cd8020f8b8447c378dfb","size":455,"data":"","first_seen":"2023-03-14T17:05:51Z","last_seen":"2024-08-21T08:40:29.411825Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ab914b33a56ffa80ca1de0819a70684","sha1":"0a103d668f19bd5529de831446389eabd85f3550","sha256":"b32cb4726155800367b1e44af2fd940b77aed84cc9baa11c0381bf35dd993c98","sha512":"25c7de99552202067965af9d381f732e1a7da5aadea450f20be3aba5561494686b9fb4a6538ede324d9e677b311adf3b7ca010c019e41e9d89ae092e9ccb44c8","ssdeep":"6144:BSK2TAQCs+IioRntDlrSP3/6SuNgb+qPSf:BSrTntD8nwgb+R","tlshash":"bf344b4ab253f9265383e4a5943f1c0af03a5859909c816cf64ccce3bcb9999d16bff4","size":249969,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.346187Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":true,"md5":"328070e1274a1a54e9ec934cab051247","sha1":"404f9d8bdb4e0eb65e6982956c50a03c3027e03f","sha256":"513a059b9874fe146de4b586845ad94449d17333a217cdbc8ee66118da1196a8","sha512":"865682a9c9b31bcdd256630b9d4ac4fbf55a0e6e765dee522c214a5ce2be864e831597e434ec2fc5e1c7e03648befde51aca91f3cf3e39a454043f2b7a3990e1","ssdeep":"","tlshash":"b2c08c25a508b9382432a283f4429f042c3c94fe7e27fda3beb0048c4702428338ccf6","size":162,"data":"","first_seen":"2023-07-10T14:55:46Z","last_seen":"2024-08-21T05:00:11.366503Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"introduction_type":"scriptElement","is_inline":false,"md5":"46e475d8d5495b3ad954747f1898efe9","sha1":"c1672a101e0216f9cc585bc4ee4c0340a6cd8c77","sha256":"cd00a8ee12254d2285a82ea490590610a500c867831301e8d91884f93ca3c564","sha512":"608bbf016ccca172077afc23b07e40e8cf849747c1ba7bfcf96e4cd5be473dee3fef9a31a639fd84c0954fbc93228a91a235020a5b7124fdb05cf16fe6884ab3","ssdeep":"384:GwSCRRuhSPRKKyXWiHLTblSALWPPiPGke9kCPTHBfguJ+PAOV:GwSiuhSPRwGM3bld8qPDwjPTHBfguYPH","tlshash":"8562d6fc6e3f9a9b14a839c65e21a1789841e713290f0c91f1fbd9e10190fac71d1eb9","size":15647,"data":"","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.347072Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/video.png","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.800Z","timestamp":1701766371800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/video.png HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 16259\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e8d82bc87223d31f958fe3a9e246895c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=BTCvsSJB6e4lordWgwKnRByFdVhsa%2F13DxggSi9HRpd0L89PUADsfLCtKXLKqAQch4P9XIIMlHx7XRiFcqir8mQ5rp4bg02B4xCX9XEaluXJvbah1Sy05cTCn7zilCjYYWG%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b4e44b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 315, 8-bit colormap, non-interlaced\\012- data","md5":"0c6ec69b054fdeb31cf3e5e10290fd8e","sha1":"5b2d2ef0e3b5824addcc34d642769f5f14671411","sha256":"d980ab372658f4c7c8f07d730ef6dc67e3fb3471f37928274f915c0308850994","sha512":"61947eefdefdc94654991e00de1045ca1e781b69fe1c7305614735926e256f007368f3e904207c8612e03d09e904e03b2a69a4cb297672a49952b2dda5459ca1","ssdeep":"384:SsAikOggeC536WiWxFu1WwOzEiraismFb:STik1gv16WnxFsWwdirVFb","tlshash":"4172d0e08a35ed8bd3a09455e1340aef76fcd0fd069e58d48c0b6aca251fa6c102b95f","first_seen":"2023-04-30T19:06:51Z","last_seen":"2026-07-08T02:18:01.089159Z","times_seen":858,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/video.png","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/binary-transparency-manifest-2.2232.8.json","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.802Z","timestamp":1701766371802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Tue, 12 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0","sha256":"8D:35:E7:2E:A5:23:90:C1:2A:61:4D:1B:80:C8:41:EE:17:73:38:3F:31:F9:26:F4:07:CB:1B:4E:B7:C7:F1:A6"}}},"request":{"raw":"GET /binary-transparency-manifest-2.2232.8.json HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nOrigin: https://ws-b4m.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-encoding: br\r\nreporting-endpoints: coep_report=\"https://www.facebook.com/browser_reporting/?minimize=0\"\r\nreport-to: {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/?minimize=0\"}],\"group\":\"coep_report\"}\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: unsafe-none\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: /eAV+XNHZ81CkhPXUun0xZRqB8iMZr2wVMtvT/gxszXTijb5pp6oaHcpjZwnT/VRQRZ4Po1zOj3Bb3cyKdjRmw==\r\ncontent-length: 2460\r\nproxy-status: http_request_error; e_clientaddr=\"AcKQgFEICD90nSzZSvDPr-ukQjYxRHZZpxD4mnJi65xTetCXgufLJTOOC-sy1AqRZ_HzCubGph477qnfPhcPRw6uOAQMH3SFMy0Y3yZeLB6LcqDf\"; e_fb_vipport=\"AcKxUbnBDoV5BZO3W8nRUBj6S3au9ofZfSh4R-fyGP_Eqi4NEPVwEQhvjsum\"; e_upip=\"AcKdqK9N4tfCuMT57SW44UaENJX-OLGyjhwGwS2VpOa9xVRSf1boa7QdkrdngOhivN74iISmq_bWrcQlF8dwv3V4XXgooKp18S4\"; e_fb_hostheader=\"AcLE4yYE51vinCwjpdI7j4pEiiXR1HnDYSVxBhcbk3xzDveONn0oBzsXFynkwuFLpqRHVYSnQLOw3w\"; e_fb_vipaddr=\"AcJpQ8I89yEJ_h3wg0fgvSKUYJjiuJLb2ZpqP_cLFmGCVGLMe_4loXMnWeRg_DnjvUx8eIdtCGBAbgACZmg81rlYigvOY7A_rw\"; e_fb_requesthandler=\"AcIFCJuM0_03ZfmX4Qdmd4Zd4RgaqnDLBF6eTdNPToAsd1zR55FTFRBoh9jMh6o4sxCkRomOc60\"; e_fb_builduser=\"AcLShabAMEWsnRLrENupxt_QUc3VFY5-cUVxxZtbRqG6w_Nzz3l-1s8vVlTJv4Pgp7k\"; e_fb_binaryversion=\"AcJmf2e7OIxZ6PJOOYpzElz5GHVLEkSEj_E9adL_aq1VP-dKZ6XtR3za97nJj6wIi2Ov_2pvQvkUmJt2E8RPC8_zKDM0MoxUGdU\"; e_proxy=\"AcL9L8nyr7Lhh9hEFBSPP7o5kUr4-zR8qwi8kaO2MJmzf0FDArnJ7C9ICUrqf_rCl8v1nYeZxauvAyOENW4B\", http_request_error; e_clientaddr=\"AcLeg8UvNCRMOUK1OQQUgZbEDf7H7kzR7E2E4KE8Q05Xn4Vxp9niDNocleYrzr8rm2QX88pdwgSfrInd\"; e_fb_vipport=\"AcIm2hNsv4-YOSNc7zzdDukYCu7m67z8vDj2fDT2xjqKMfUa0y4v7VLgUbZL\"; e_upip=\"AcJpA0IYlcQ8auHvijXjssBW3CkvBh1xlnkQim2zhvQsYyIAaSkzT68Zzuptp7RTahOrq2mXYwbK3Y7arr1UYc3hQHfaZWc06A\"; e_fb_hostheader=\"AcJh2juSRMjwI_KWesk9t91QuRXBZbKb0dfvLy-vFSwrSBDwLlmgnyoOyddzMnH_exg6vezQK5MGYA\"; e_fb_vipaddr=\"AcKD_YIsEPVodS8ANi5cA9Tgij_t35DcnF0hdrGlOKl_a9ifi6b4A5dv7ZczagSRujzg104\"; e_fb_requesthandler=\"AcIAv1gTIVy_toZUWckqbWg_a3dUv98uT1V87wC7K8u7SgCvw7yKjnFsqAjb9gf4GxYN_F5r\"; e_fb_builduser=\"AcI44y8xX1XxSU8FGmiOFc8PYZlsHUSBQLbynKIr6-MnP03_UYqKA6zcg-urlEutwHo\"; e_fb_binaryversion=\"AcJPj0PulfU-JSX2sRhsoQJVqlqZSpgXcU9vOLWV_6s39lyHXewvMgUcViChjnEL7Md4jrF2-cZ866RZy7VmOsDsPDf_AYssygw\"; e_proxy=\"AcJ0kgR_ac5saTddTu2NThUGtlH2CQO_kOC_GHfAcUBqI3clHSDiCXRiA74hoD29jcuYnUyvMgC936Cr\"\r\ndate: Tue, 05 Dec 2023 08:52:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":2460,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (2793)","md5":"f1ac791356b3b6a884f9d3341fabe1da","sha1":"85c8d6a72ce89e3254dea435474c3ee04d0c8cbd","sha256":"87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d","sha512":"c1c93722219b2b2240659c9a9a3b29f082f81f20a9bc3116deb48f8eee056e8e1082f5cf02e3de88b77ef1f28ac6aff8a31f46a9a48cab0bf1cf83a919997331","ssdeep":"192:WT+T1TD+65JRczpANatak7LqY4PdgJix8fVIpcKEVKKEiFg+C8K:8UatakfqYZJix8IctVKtogB","tlshash":"1ad1a90b0351939aba4d113cb999268cb5a0e5cbe4b4f1e4bb1f1011ebdd4e4aa4d7fc","first_seen":"2023-04-07T09:02:43Z","last_seen":"2024-08-21T09:42:13.342026Z","times_seen":820,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":80,"dns":39,"connect":7,"send":0,"wait":48,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:52.244Z","timestamp":1701766372244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4 HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ws-b4m.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 05 Dec 2023 08:52:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 520\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=9U40CwdSjZUHau6QaDgZRRG2uOgOCPwuEzVzWMZ6MZjoOwa6GefqdSPepOInzgviUZZk0E7N%2BXm3BSzT9MhGHUkGxnL%2BlqbuZv7rDC4Ts1i0fwDVNHw29HqWlI38qEC3dNDU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0e294fb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":520,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3704f92207749f1f9b308fc856e7b7eb","sha1":"b12e7554f139b239e0cb11f2138fa328e414a761","sha256":"7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e","sha512":"c0812fb9a6cc887ce08a773103b08a719a65700c052ff79e35f3471321abc091aa18f73fe6af4600e8409732cc7524ef1760e0a3a242475d41f90fa4182a0297","ssdeep":"","tlshash":"abf00ea3b1130c0e13a8627033b1b0b4dc867dcb67030e51846a303facc16a9c7a33d8","first_seen":"2023-04-08T15:59:38Z","last_seen":"2026-09-09T18:55:04.638773Z","times_seen":7367,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/whatsapp-webclient-login_c09223f0813e7c3adc16476cba2a5d0d.mp4","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/ws","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-05T08:52:52.343498785Z","timestamp":1701766372343,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ws-b4m.pages.dev\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: atEzIX0ZrwkBt1iYP7qGqw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 05 Dec 2023 08:52:46 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2lMNn%2FH%2FCNnFMhwo81riZ703msuT8PlTmoevdO7ikX3lTPg1H4rYad57e0MeEwcnSAGKJ4URgdnQRRvJaFHJ6mpIvPsAlptQwYzl5RMTA9%2FiI1PledQ0xg7WRqe7BYY0%2Byah\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 830b0e0e8b41b51b-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":307,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3704f92207749f1f9b308fc856e7b7eb","sha1":"b12e7554f139b239e0cb11f2138fa328e414a761","sha256":"7407aa48b72bcf4fbc483d468f668297de0850af456c1a57c8fe569c932c789e","sha512":"c0812fb9a6cc887ce08a773103b08a719a65700c052ff79e35f3471321abc091aa18f73fe6af4600e8409732cc7524ef1760e0a3a242475d41f90fa4182a0297","ssdeep":"","tlshash":"abf00ea3b1130c0e13a8627033b1b0b4dc867dcb67030e51846a303facc16a9c7a33d8","first_seen":"2023-04-08T15:59:38Z","last_seen":"2026-09-09T18:55:04.638773Z","times_seen":7367,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/ws","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/img/favicon_c5088e888c97ad440a61d247596f88e5.png","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:52.318Z","timestamp":1701766372318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Tue, 12 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0","sha256":"8D:35:E7:2E:A5:23:90:C1:2A:61:4D:1B:80:C8:41:EE:17:73:38:3F:31:F9:26:F4:07:CB:1B:4E:B7:C7:F1:A6"}}},"request":{"raw":"GET /img/favicon_c5088e888c97ad440a61d247596f88e5.png HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ncontent-encoding: br\r\nreporting-endpoints: coep_report=\"https://www.facebook.com/browser_reporting/?minimize=0\"\r\nreport-to: {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/?minimize=0\"}],\"group\":\"coep_report\"}\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: unsafe-none\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: j1Q48UUiJNu2eOiyeSXIFga4odVSA6nIHnyDwtQPQ98tJMsftInUuI38qA8JeXKt5zfQ6oElHUJJfZ45exNxJA==\r\ncontent-length: 2460\r\nproxy-status: http_request_error; e_clientaddr=\"AcLHTt2b4feLr9s4zdH72_3E8uGK3hAhzSPN1bbcB0AU_mY7UCZvcYmXjquwO9-VQfL2xx3eKbQlz-8yAhTUQW1P7hQ7C0LMcJL2LtE1nMtJqZIK\"; e_fb_vipport=\"AcKF14lyIADbWudcDqs4vmpzZgX7WX5Bp30mVqb5ML3zEYRepuxhD3ctA-JC\"; e_upip=\"AcLcgIAL3jeaGrkiGH8m4otKd8U4Ymu8VRwY6XIBD9DSIi_Ro4N4xHsHSR-X6Z5b5L5-IXI3L-B2xUIyfcBK8if7OyPVheUeIzM\"; e_fb_hostheader=\"AcJ8nP2uZoo8LnIbB20V6FoL3ScufOuE1Tki50hmOzMKyzdA-URj71s965y6bRqr9DdpztJqr587Lw\"; e_fb_vipaddr=\"AcI_ZNfLJJCOlR5HATuIoXQJd5G-4o1Ub3-jt7nzPTyY1Yn6fMAi9eua_YkW-gm7KexE05ZoavaU9efsGJvCVmBgLcSEKZ_FTQ\"; e_fb_requesthandler=\"AcKb0zaih1z3L3-E950K8xxLYtpFu65IfY8wEm32v4ByGniJ1Mk-1XQCOmLWh12zDn6yh-ejHwU\"; e_fb_builduser=\"AcIVnZ02J9T-OFPVF9Bi2lM6X6fne6mBxC1QhyjsJsNcB_67_V8wyfjAVM1DasQVQ4I\"; e_fb_binaryversion=\"AcLEM4TwSElBS7yPgxWPj3A9MoSlT_QhMHWO-c-Bp-oUVoGcVGhIxH6QurRTXd7ovdRs6RIMnqyYi_ZqMOg__FYavIFKO6DMWEE\"; e_proxy=\"AcJHtYoYFtEqyHNo9WOyo6zDikhDc9q3n21e2IqQAwoTX9Rq62FGt4dT81MJ5imJ0G9Fs4SLky1bArV8D-Aw\", http_request_error; e_clientaddr=\"AcINTzGZX4N6tt0wWn6Dv81cNIv9d45Yi0BBELqYRW3Ks88AA7ztYNaniZFlap-NizKMuTyJm_vRyhGx\"; e_fb_vipport=\"AcJdY3P1tuWtqMNHKgTJTYg5kAL_xySRWUNsP2xbiZ5Apu_bGvG5GuohSrqx\"; e_upip=\"AcLP1uFB_tIETJ5i6pnHXr5OT1y0OK_P7lkmk-HSHkMtMN7dDbhdF22x3w5awe6msggAmPPatReu1JZB_tWedk5dG5Fmc6OgDA\"; e_fb_hostheader=\"AcKY_CJQ6WO2mSUur-erelHoU8vkEVkIIpQf7p4IBLRdF6A0Mzoxx_YQ8Hn2bp_-4lMxcE1PRrZ0nQ\"; e_fb_vipaddr=\"AcJWqUDFOwj9b9a4aYCJlxTPkMxSxW-pnJxgexrZ4GyaAQKjRJ4ShDEQXTg1qfNG8kIe9tc\"; e_fb_requesthandler=\"AcLrXXJCeRpTNvm07YMrymXbdHJN7mMej3AV5-LM4qaMiEArI0jZzN4XcfS2aob0oBhg2VLF\"; e_fb_builduser=\"AcI4kgMqzj0PLg0OwJvp1CvYRaceG0_FG3gDjwhqPyd52Q2Yko_-6Jzdz50Mnhq4xUo\"; e_fb_binaryversion=\"AcKhtRuJkECAbsGJ7MGBX6AeYZUuZPEBaXjVnapvUC01s9aFbv_FaxngR6lnsFq7Otqxgbf6lcKZv4Tfx5DNOGD4IVv0lAT2SC0\"; e_proxy=\"AcL6rHc4ANDf7pa6VDhY5HfG5_sNhjZ_pTFJ5SDc5x_9cpjHvro6C3BYRwVpZzf1N6aDKsieHLuwm8FC\"\r\ndate: Tue, 05 Dec 2023 08:52:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":2460,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (2793)","md5":"f1ac791356b3b6a884f9d3341fabe1da","sha1":"85c8d6a72ce89e3254dea435474c3ee04d0c8cbd","sha256":"87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d","sha512":"c1c93722219b2b2240659c9a9a3b29f082f81f20a9bc3116deb48f8eee056e8e1082f5cf02e3de88b77ef1f28ac6aff8a31f46a9a48cab0bf1cf83a919997331","ssdeep":"192:WT+T1TD+65JRczpANatak7LqY4PdgJix8fVIpcKEVKKEiFg+C8K:8UatakfqYZJix8IctVKtogB","tlshash":"1ad1a90b0351939aba4d113cb999268cb5a0e5cbe4b4f1e4bb1f1011ebdd4e4aa4d7fc","first_seen":"2023-04-07T09:02:43Z","last_seen":"2024-08-21T09:42:13.342026Z","times_seen":820,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.whatsapp.com/apple-touch-icon.png","fqdn":"web.whatsapp.com","domain":"whatsapp.com","tld":"com"},"ip":{"addr":"31.13.72.52","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:52.314Z","timestamp":1701766372314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.whatsapp.net","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Sep 2023 00:00:00 GMT","end":"Tue, 12 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"78:35:13:B9:4F:97:08:8A:C9:B3:F6:90:13:1F:0D:71:75:3E:C0:B0","sha256":"8D:35:E7:2E:A5:23:90:C1:2A:61:4D:1B:80:C8:41:EE:17:73:38:3F:31:F9:26:F4:07:CB:1B:4E:B7:C7:F1:A6"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: web.whatsapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ncontent-encoding: br\r\nreporting-endpoints: coep_report=\"https://www.facebook.com/browser_reporting/?minimize=0\"\r\nreport-to: {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/?minimize=0\"}],\"group\":\"coep_report\"}\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: unsafe-none\r\nvary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: Eti8IbExzF8io0FBA+Mg2mET0pn6tyojtyfACr0BOZfyUuLcVLOuf1VYwDA1tDcTg3VlczxzDN6EPoxbpEinYg==\r\ncontent-length: 2460\r\nproxy-status: http_request_error; e_clientaddr=\"AcJtQvza3YQqpuZ0qCU0HkdtAeHUN8__t6iGMdI1ub-FuPhLpeeZL1aUq_gTJbRdX5ax4c6a90I2qVGhnaz2QJV4ibYvfi_rM11Na_l6UlwfC5bG\"; e_fb_vipport=\"AcJNHoXOf1toApXlC3eCJHyVckGLxcIxDn9ag4mQNoRvvw3Fsr0lUhymfVBR\"; e_upip=\"AcLTuXtL0Wo4d5AeEY4h8gmOHqzGal5nwP8V5GpcY3fu9oDGtH50-M9DmaJvdE9TzRk0-3nlR2sRLafPUHwN6ruWYfMsypwNnO0\"; e_fb_hostheader=\"AcLmVPo-DdtHdkeUuCxnv8_Rs6n0VWNmJdUXAuPNvPayfrFyYDIA559NYJHO1ZeM8p64TxNiFCT39w\"; e_fb_vipaddr=\"AcLFViCpc7G47Qoavs6j4ZaIsj5m-Bj4MAQP2JOsndXNia3n16PybnmUtZPgQdYcSN8kWFrNgpZE04kVRtB3ZwJuMiizICRzSA\"; e_fb_requesthandler=\"AcJrXKWyqCLxHE27F1D6GcOO7OepkiikIyFw1vQ8m4hgv-D-ClntjvYxED6Nr5XlbR_ZjaxwHFI\"; e_fb_builduser=\"AcJFJYYI9RhHdHEl3Nkg8UK2JRBOnq4lkEZvgnaTrPjDlUe918knujMKoUMqTl4agwA\"; e_fb_binaryversion=\"AcJalP8drTeze0YD1-W4pqlefXdrjs77fLBpxOCunNP-ZFF2s-bBkWXl7hGz8KtCmwZzEqRC4vug0OA60U2N6oS5hBxP5_PuS_M\"; e_proxy=\"AcJZuNs4YqazQDYCD4PyGAWwhyV75Lif46DYSaab2UvX0qI-Cj2LrhZTTfI8SU_3NwaYtmCTKNdw129akGvO\", http_request_error; e_clientaddr=\"AcKDf2U6NNDT-d4Ym2eMf5ZrM9x058gdhLQr2Fk9Ay_JLiY4bIuKs3j-HtpegnULKwSOB7j_NA0fXKe5\"; e_fb_vipport=\"AcKmBI-h1t5CSoGnE-X9-Y3wryya7wteR_AIIlnlXyBOKCvAmTYamjGqKHBP\"; e_upip=\"AcIpUX05VhNmvnRLZ_v8ygnIQPguSu8xsRpra6dgriyLRqy5CH7_VQNwwNn2AZlbBCRxnTQS7Re_YeCY_NKpVFQsnVV78KITWA\"; e_fb_hostheader=\"AcJROKYHZZ0dhpD1Ci_bbtH4YEHSNAUD9Q-dSdUx_rrG7mXQRCr-tprG6pjF_l0YKZGOanGzx3BtuQ\"; e_fb_vipaddr=\"AcI-d0_AVqlIrMUWrY5-pVw63fI08hHyzCl08iMoyU0HCTbEEhKs_hY9H5I8H-Mx8-qRvOY\"; e_fb_requesthandler=\"AcKO0zfQGxUIa84raSfVfjA4WGxKeoUnD712C7BOm_g8wbrUYHL_XJh0Eu58OTMJKns5HBiG\"; e_fb_builduser=\"AcLECsIsDUzg2b8Icg55fQLunolkL1D1RjUCVGYxq0fQjGFTNDTK39-ax0MWgaL3kU4\"; e_fb_binaryversion=\"AcJUw4qrykB4C32nnUKQtuCUKvEB236IcOiXMlv-VBEKKoGfP75DiuWZfDP551tEcZmFEPoPhEb_CkUExkL-JgxbELp0uZGY0Z4\"; e_proxy=\"AcLzdgmPaV2YXzqFEC2GJAKwJnsojCOF3OGExAMm7HXubf1vX4StPJZQVQ_QJsxTWucd6G8yLZ33kV9t\"\r\ndate: Tue, 05 Dec 2023 08:52:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":2460,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (2793)","md5":"f1ac791356b3b6a884f9d3341fabe1da","sha1":"85c8d6a72ce89e3254dea435474c3ee04d0c8cbd","sha256":"87d28f909a65f055c786a96751a9e3467ff378c56f9d38f5cffcfdaf0d724f1d","sha512":"c1c93722219b2b2240659c9a9a3b29f082f81f20a9bc3116deb48f8eee056e8e1082f5cf02e3de88b77ef1f28ac6aff8a31f46a9a48cab0bf1cf83a919997331","ssdeep":"192:WT+T1TD+65JRczpANatak7LqY4PdgJix8fVIpcKEVKKEiFg+C8K:8UatakfqYZJix8IctVKtogB","tlshash":"1ad1a90b0351939aba4d113cb999268cb5a0e5cbe4b4f1e4bb1f1011ebdd4e4aa4d7fc","first_seen":"2023-04-07T09:02:43Z","last_seen":"2024-08-21T09:42:13.342026Z","times_seen":820,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-b4m.pages.dev/ws","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:52.256Z","timestamp":1701766372256,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ws-b4m.pages.dev\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: atEzIX0ZrwkBt1iYP7qGqw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 05 Dec 2023 08:52:46 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2lMNn%2FH%2FCNnFMhwo81riZ703msuT8PlTmoevdO7ikX3lTPg1H4rYad57e0MeEwcnSAGKJ4URgdnQRRvJaFHJ6mpIvPsAlptQwYzl5RMTA9%2FiI1PledQ0xg7WRqe7BYY0%2Byah\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 830b0e0e8b41b51b-OSL\r\nContent-Encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T20:24:37.138323Z","times_seen":18409720,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":28,"connect":28,"send":0,"wait":35,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/ws","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/stylex-2d46744708947781f1f33a0069cbc308.css","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.785Z","timestamp":1701766371785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/stylex-2d46744708947781f1f33a0069cbc308.css HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"65cf534a072c0cdda7d1094f883a9072\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FlRNgNybFwyHIXsqOwMPlU37Ub5AcD89xXclDFDhtJJbtPWMBde5s%2BN2MPPpfmLwiRmiO8wmwKle5ruUl%2FU6pYRZYO1caHV06mQUqbaN%2Bg6xoeizHCozI%2BMtPi84X1xwCD3h\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b3e38b4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116339,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (937)","md5":"ce08c431738ca6a8561b1c58a35b0b70","sha1":"46628f24522fd5f7891a61a3668cde2aaaa80dd6","sha256":"d3889a9a244c69018e4848bffa27b76845ca2c34813976342d4b122e6533bbca","sha512":"02b62a911dd8ac5575ed6813e9b98a009c8c270f35703eaaac5c3e67d40c72ec0d2821bebebc0c89d5969a5ed30987993424d2d4f896029f30adbef433cb4c89","ssdeep":"1536:Ud9iZpEir/tljYv4+tOUThVihbrrxVA/7V7YwcTzLulHFzxMZ9xJ5qAXOh:m4+llubfYJ1kOh","tlshash":"aab3fcf8626df13fbd2ac92799c47dd8a1082816aee219d3f85134bcaec1b9d1c1571c","first_seen":"2023-04-05T16:34:09Z","last_seen":"2026-08-26T09:34:21.606239Z","times_seen":776,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/stylex-2d46744708947781f1f33a0069cbc308.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/qrcode.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.798Z","timestamp":1701766371798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/qrcode.min.js HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7ada293847f072170f0c5a32bd67bad3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2FfXaVoGJC8PCPjE0pYEGqBLsCM5yapvFxmBEUrNmDGJa9OyUUxvGAB5OrpO6BNbDkUy2J4P%2FCJA0pA8FMw%2FQb3s72wckO2aWyVsFUrDDSVeKN5p015dgcEVk9vyeVlNZDBO6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b4e41b4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19927,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-11T19:58:27.428368Z","times_seen":72650,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/qrcode.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.804Z","timestamp":1701766371804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/libsignal-protocol-ee5b8ba.min.js HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"8a9ebdc63ef791fcc4d7fc80f12ae130\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Fx6xUMiTYeAEs%2BZEQozTggEJUsNph%2B%2FI0AtTph7pfy76niMiQEWksvJ%2B5wQ0%2BcHbru2iNP07PaKFh%2B2f2bxVj21N1mBidyTECC%2Bszh%2FnMyqV3PdbVVAZgkP0TYE4JGK3BOhu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b4e47b4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249969,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8ab914b33a56ffa80ca1de0819a70684","sha1":"0a103d668f19bd5529de831446389eabd85f3550","sha256":"b32cb4726155800367b1e44af2fd940b77aed84cc9baa11c0381bf35dd993c98","sha512":"25c7de99552202067965af9d381f732e1a7da5aadea450f20be3aba5561494686b9fb4a6538ede324d9e677b311adf3b7ca010c019e41e9d89ae092e9ccb44c8","ssdeep":"6144:BSK2TAQCs+IioRntDlrSP3/6SuNgb+qPSf:BSrTntD8nwgb+R","tlshash":"bf344b4ab253f9265383e4a5943f1c0af03a5859909c816cf64ccce3bcb9999d16bff4","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.346187Z","times_seen":277,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/libsignal-protocol-ee5b8ba.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.805Z","timestamp":1701766371805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/runtime.88c356058afe3d58a508.js HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7430056c140c5b0c8d938cac5e9dfa97\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=doZwjnqdIo51YDRV1NxREuYIEMVF9l9m2stR4rj2RgaqB4niYMFS1fxfCy%2Fm9pBPiXKzHdIVzcxtXV%2BHcYIxipRRMbYOAvDL0lCInEVdoRmfZh8LXoLGFORTKFWWwlf98kwt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b4e4cb4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15647,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15564)","md5":"46e475d8d5495b3ad954747f1898efe9","sha1":"c1672a101e0216f9cc585bc4ee4c0340a6cd8c77","sha256":"cd00a8ee12254d2285a82ea490590610a500c867831301e8d91884f93ca3c564","sha512":"608bbf016ccca172077afc23b07e40e8cf849747c1ba7bfcf96e4cd5be473dee3fef9a31a639fd84c0954fbc93228a91a235020a5b7124fdb05cf16fe6884ab3","ssdeep":"384:GwSCRRuhSPRKKyXWiHLTblSALWPPiPGke9kCPTHBfguJ+PAOV:GwSiuhSPRwGM3bld8qPDwjPTHBfguYPH","tlshash":"8562d6fc6e3f9a9b14a839c65e21a1789841e713290f0c91f1fbd9e10190fac71d1eb9","first_seen":"2023-03-09T03:01:09Z","last_seen":"2024-08-21T09:42:13.347072Z","times_seen":244,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/runtime.88c356058afe3d58a508.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T08:52:51.281Z","timestamp":1701766371281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"554720f792b79cc8a07994696559ec5d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=uJdO3PclrozCTaMRiqsplmfvyZhZEuMSQrEav27PmIdiSlsmZWpNsOnAL1at%2B%2FCQUowTOyNI%2BVC00Do5rlZAD7Wvfz2UJfq%2F%2BDxsAKlFdkQ46EL%2B3Y7nUI7wtKYvEpvDfPZ6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e08397fb4f7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30923,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T20:24:37.138323Z","times_seen":18409720,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":13,"dns":0,"connect":3,"send":0,"wait":30,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/bootstrap_qr-e2b403f65ed52d327e90.css","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.786Z","timestamp":1701766371786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/bootstrap_qr-e2b403f65ed52d327e90.css HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"03e94140affd61cffcdc0cc2d7d64da0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=D65rrP6iJGJC1NBYWBdkyvkaZcs%2Bms2QmcJyvPv0VySs2t2K8A3WFD3vjHvwmKoncJrHny7eII8AiFRR4BrMYa0SJTeURtUYbFsRlgd1HiocwwRDl%2FwNN7bGK5T7xEdfpp7G\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b3e39b4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":176830,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T20:24:37.138323Z","times_seen":18409720,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/bootstrap_qr-e2b403f65ed52d327e90.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/bootstrap_main.9d6050e3d2fff5b782d3.css","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.788Z","timestamp":1701766371788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/bootstrap_main.9d6050e3d2fff5b782d3.css HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"f2144f69865583616f03de95fe1b8096\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CWZSqkCQlbZikbUumrV34COMqS3vGwfTsAXbjU1Ph%2F%2FhkjLoqVPJifeHpURVg%2BYIQbsdAdz%2FFi3iANgyIqcY4zaLSdfFzM6ECQhX3drKtm0SwoUdfAldie%2BdCa7BpryjKzxc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b3e3ab4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":230953,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T20:24:37.138323Z","times_seen":18409720,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/bootstrap_main.9d6050e3d2fff5b782d3.css","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/jquery.min.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.791Z","timestamp":1701766371791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/jquery.min.js HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0b037baf132504ce7005a11383470752\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=NBTOUnSm9k5sZROVuORrscUrgqOUlKdyhRMhX0eCYDJ1oN%2B9sY5iMarL7Pn%2FSJPq2twT2hqSfLiDit73FSCC5IDDIBA9sr3gGY3oAzd7GFpfrJ3sHTJZ%2BfAfgqjdk6boskQi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b3e3cb4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93099,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32072)","md5":"e3f24f23b859cf718282e3806ed5ce38","sha1":"c92a61cb4fbc23adb05973638f60e2999bed4a26","sha256":"e0108076470765be9ef1e9b242b8a52ef78c8f4532c7263426abc05ea4b60240","sha512":"84b7b499ab6fc2deb2a2539f011a7455a5220532b181d372489b4a04facdf0c17588051b746c184f92da77c4c972366b9d1390555292e5e54caabedc03f3495f","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFn:qGsKXlI2p0WPSbDrstfak","tlshash":"2893f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-09-08T18:12:34.045975Z","times_seen":1656,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/jquery.min.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ws-b4m.pages.dev/load/jquery.cookie.js","fqdn":"ws-b4m.pages.dev","domain":"ws-b4m.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ws-b4m.pages.dev/","date":"2023-12-05T08:52:51.794Z","timestamp":1701766371794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ws-b4m.pages.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 19 Oct 2023 02:17:35 GMT","end":"Wed, 17 Jan 2024 02:17:34 GMT"},"fingerprint":{"sha1":"F0:16:AD:F7:E6:3A:83:EB:6F:F5:09:71:06:24:F4:0F:2E:E9:98:FE","sha256":"84:80:36:D2:D4:DE:CE:BB:A4:E2:59:C8:DB:9D:26:90:08:D3:56:74:52:61:4F:04:42:96:2C:54:41:87:00:20"}}},"request":{"raw":"GET /load/jquery.cookie.js HTTP/1.1\r\nHost: ws-b4m.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ws-b4m.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 08:52:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"ccdb2dc189ac698dd8a582a4291c7451\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=I4Ww8pQ4L3X8hJSim7lKBp8%2BzcDNood%2B3xFS7YCqWIUmFvOdx9YFQsyamM66I1XAxGlhwyJuomfpQajUNonnu8HngZYPMlu4D9C8%2F4uhnwCLeLH7sKm7NO0m0BBNgv8%2Bsk%2Fz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830b0e0b4e40b4f9-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3120,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3439), with no line terminators","md5":"c776f7843da058a9030aea314d49613f","sha1":"b91ca11b466e153f05219e5e1a1e9f4348b2cc14","sha256":"573c67cf9289d24e8756d0f86d37652e7f2383233ad50dca47f2ae5382923735","sha512":"721cd85c9d7dd293136744217c41f11c5e297e4611ce95249d932c3364a33ab0048f1a5e4c8bb86552c1796d5c2a7142395ea0cf0a240278bc061a1f05bda249","ssdeep":"","tlshash":"1d610e6134fe623e0d9b6bd5676f0468b83ffe70b02406448426b995286c862dba7c5f","first_seen":"2023-04-07T19:39:00Z","last_seen":"2025-04-01T12:45:38.118997Z","times_seen":678,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-04","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-10-25","alert":"WhatsApp","trigger":"ws-b4m.pages.dev/load/jquery.cookie.js","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"http://phishtank.com","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-05","alert":"Sinkholed","trigger":"ws-b4m.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}