| |  139.59.8.127 | 200 OK | 15 kB |
URL User Request GET HTTP/2IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeHTML document, ASCII text, with very long lines (20200) Hashd2fe168301783b12fc9d30bc7e19d2a4 c0ac5a0019e27c40d8ebbb3e3b385bf2df6ab908 debe0311cb090f38b55e56f1cba9c24128b9674fc131f278348d38da415267cf
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:33 GMT
content-type: text/html; charset=utf-8
content-length: 14852
cache-provider: CLOUDWAYS-CACHE-DE
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
last-modified: Wed, 10 Apr 2024 03:31:58 GMT
cache-control: max-age=0, s-maxage=2592000
expires: Thu, 18 Apr 2024 21:32:36 GMT
x-xss-protection: 1; mode=block
vary: Accept-Encoding
content-encoding: gzip
age: 25317
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/themes/softdown/assets/fonts/kufi.woff | 139.59.8.127 | 200 OK | 39 kB |
URL GET HTTP/2gbwhats.in/wp-content/themes/softdown/assets/fonts/kufi.woff IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeWeb Open Font Format, TrueType, length 38628, version 1.1 Hash8d2397d1721758e5b3f16855a5b59ba8 1ebadb67e90a1e35d333d969068fb45481db065f a5d930fb9951e4f30eaf140d04ab1cee09f4ca98485d1d0aa486c74a6b931b01
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/softdown/assets/fonts/kufi.woff HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/font-woff
content-length: 38628
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-96e4"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/themes/softdown/assets/fonts/fontello/69be71.fontello.woff | 139.59.8.127 | 200 OK | 13 kB |
URL GET HTTP/2gbwhats.in/wp-content/themes/softdown/assets/fonts/fontello/69be71.fontello.woff IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeWeb Open Font Format, TrueType, length 12732, version 1.0 Hashd152652705795a7bf3084b58310b19c6 9d88166bf875674b0ee03dadc89936b21eb8a24f 57741957e27bc0c04169e68103e38ea6ac551effa8a72a2ebe5597b361321abb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/softdown/assets/fonts/fontello/69be71.fontello.woff HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/font-woff
content-length: 12732
last-modified: Thu, 02 Nov 2023 02:11:28 GMT
etag: "65430550-31bc"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_32004fd7ecc7e1d70927d63e4f14fb62.js | 139.59.8.127 | 200 OK | 8.1 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_32004fd7ecc7e1d70927d63e4f14fb62.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hash88f28335712517104b408a4b9c37fc9f 8aa204bd24edf83f8ff2eee7562716ad27aede1c a04441f199d21c9ab228362047dbe802b4921c44281783ee31cea1350de43153
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_32004fd7ecc7e1d70927d63e4f14fb62.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-5c58"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_f09ed49482285d528660f084a61d224b.js | 139.59.8.127 | 200 OK | 5.4 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_f09ed49482285d528660f084a61d224b.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hash1e953fca6165f1b1d107b850712a96fb 407be8db695431c6d365f6a01c4822b55ba8e779 a263719843114617a3c842098505632d63c3de140d199f3d2dbaa11d974daf44
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_f09ed49482285d528660f084a61d224b.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-350b"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_22199c3b4d5a7f6b104de714ed804e66.js | 139.59.8.127 | 200 OK | 4.8 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_22199c3b4d5a7f6b104de714ed804e66.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hashb26719a00f4c0346faa965960c61e248 f8c519540a9ac93d68d65aa1bc3dc00f355a168e 52b02dc5c0f31c762537efdb75d8852befd2eaa0fe469b5137c4285fd47dbdd1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_22199c3b4d5a7f6b104de714ed804e66.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-25e"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_96aa70e645da775a1d7db42d88d9c946.js | 139.59.8.127 | 200 OK | 4.5 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_96aa70e645da775a1d7db42d88d9c946.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hasha6115464dffa20326ba8635f4255b391 b8c978733261786bd82ab41e0f457bdebd9c3273 da32b8dea5da441ac73db5995a159c4a521e5151c4ad7a7ffa3cf2706d247424
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_96aa70e645da775a1d7db42d88d9c946.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-2d"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/uploads/2023/03/GBWhatsApp-favicon-300x300.webp | 139.59.8.127 | 200 OK | 7.3 kB |
URL GET HTTP/2gbwhats.in/wp-content/uploads/2023/03/GBWhatsApp-favicon-300x300.webp IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeRIFF (little-endian) data, Web/P image Hashd012bad6ea0e663bf6da8a3b8abefb3f f63788449d934d104fe6da5a34213bfc47df7458 20786ed2d06ac17d56fa7467fd7a555fabede3b65430afd4cbf872323f0fac6e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/03/GBWhatsApp-favicon-300x300.webp HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:35 GMT
content-type: image/webp
content-length: 7254
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-1c56"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/uploads/2023/03/GBWhatsApp-favicon-55x55.webp | 139.59.8.127 | 200 OK | 1.4 kB |
URL GET HTTP/2gbwhats.in/wp-content/uploads/2023/03/GBWhatsApp-favicon-55x55.webp IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeRIFF (little-endian) data, Web/P image Hash06a81805ff10e1c87b418097fa2c311c 00857f1a9d47b2010c6a578bb2268f4ff3730dcb a966c746c97201c68f5a12e1f603f4c5f19313aac81f58b37fda19a38133f551
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/03/GBWhatsApp-favicon-55x55.webp HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:35 GMT
content-type: image/webp
content-length: 1352
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-548"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_59eea72e9e51a30b8c8cb67a56e56767.js | 139.59.8.127 | 200 OK | 20 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_59eea72e9e51a30b8c8cb67a56e56767.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hashd1af91b596377ca0848ef212bca5ebeb 42c8964d68991bcbb2f0a74b527c7b012b9a43a8 413639de386ee37b42a1d9a2eae79f3ddba60ee207b656236020fcfd74568364
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_59eea72e9e51a30b8c8cb67a56e56767.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-d6"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/uploads/2023/03/gb-whatsapp-apk.webp | 139.59.8.127 | 200 OK | 6.8 kB |
URL GET HTTP/2gbwhats.in/wp-content/uploads/2023/03/gb-whatsapp-apk.webp IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeRIFF (little-endian) data, Web/P image Hash2737a9e39f5236bd1ac40e42f0c88837 ba6bab80de3553375e93ca55b0f33b8f4c2cddf9 534ebe27aa220b652897f79b56472d0b2332af58dbf183f22f2abee924938b6c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2023/03/gb-whatsapp-apk.webp HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:35 GMT
content-type: image/webp
content-length: 6826
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-1aaa"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_db57c0b66004b78248c20a9792c910ed.js | 139.59.8.127 | 200 OK | 25 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_db57c0b66004b78248c20a9792c910ed.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typegzip compressed data, from Unix Hash6bdd338d22c84b834fb1e3275dd94e03 ddfe9e24000905b2b64d6f0f135edd072d371475 d74299325b815f9848c364da955247d1eda9d25409303649308869e78880e739
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_db57c0b66004b78248c20a9792c910ed.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-74"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_57154eb44f55712fa6815ff26b7d0e0d.js | 139.59.8.127 | 200 OK | 96 B |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_57154eb44f55712fa6815ff26b7d0e0d.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeASCII text, with no line terminators Hash15d4a9eebfb9dbd4783c0cdbbe9d65ba c604b9f2ca1f45dec9d90d162adecadf38abdccf d7c464d2f638aebaf063088451f7e57bd4a273533eca303fa74c7b1d63f1452d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_57154eb44f55712fa6815ff26b7d0e0d.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-60"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_dcfcfba67b9ea3eb7b821c2c481de437.js | 139.59.8.127 | 200 OK | 7.3 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_dcfcfba67b9ea3eb7b821c2c481de437.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeJavaScript source, ASCII text, with very long lines (7491), with no line terminators Hashdb9c21575e0135bd8793bafc0b5cf6c6 d05fe04889f429b44c8a9b8bddada567c23cffe3 b3e1eb8e481a0b33f61d52d38fa2e5363b0aa2d0748edcac5bdd2d94fb9cf997
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_dcfcfba67b9ea3eb7b821c2c481de437.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-1c8a"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/css/breeze_c093ab60570c9986eeb8434823b9201d.css | 139.59.8.127 | 200 OK | 166 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/css/breeze_c093ab60570c9986eeb8434823b9201d.css IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
Size166 kB (166397 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/css/breeze_c093ab60570c9986eeb8434823b9201d.css HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 23:13:22 GMT
vary: Accept-Encoding
etag: W/"660c9112-289fd"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_5f5b40cac175be6c823ee3f4cdb53ac4.js | 139.59.8.127 | 200 OK | 1.1 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_5f5b40cac175be6c823ee3f4cdb53ac4.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeJavaScript source, ASCII text, with very long lines (1165), with no line terminators Hash7d4529418f35e119a1ee7954d8050cfe fbb082ba5747aab4c324c62ede84da8cd0f45821 7adba9f0c355b92c85bfd4cb94eb3ecbf7d17fd041a7bbc65ff7514b189a7991
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_5f5b40cac175be6c823ee3f4cdb53ac4.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-476"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_32d8122f2b2cdfecc32fff39e0e7d4c0.js | 139.59.8.127 | 200 OK | 97 B |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_32d8122f2b2cdfecc32fff39e0e7d4c0.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeASCII text, with no line terminators Hashb7c345ff5c75057fdae4907daf447414 becaf7603f3766bed72e12095e3ab21c3d4e0638 8a0a1b99c5d25d298774fdfe1ce77655b3c32176327299f4adbfc29e05e846fd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_32d8122f2b2cdfecc32fff39e0e7d4c0.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-61"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/uploads/2022/10/GBWhatsApp.webp | 139.59.8.127 | 200 OK | 25 kB |
URL GET HTTP/2gbwhats.in/wp-content/uploads/2022/10/GBWhatsApp.webp IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeRIFF (little-endian) data, Web/P image Hash4db3162c18aa7ca03dd1c5303d1e1bc1 0e8fab71f8cf0290c5527983f9388f8115c625fd f80d3b77672a67d164cde38b57093ffeaa2017d77714b979ba829948051854cb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/10/GBWhatsApp.webp HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:35 GMT
content-type: image/webp
content-length: 24852
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-6114"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/cache/breeze-minification/js/breeze_c04eb7f716ec1556c71c57f01c5f80fe.js | 139.59.8.127 | 200 OK | 88 kB |
URL GET HTTP/2gbwhats.in/wp-content/cache/breeze-minification/js/breeze_c04eb7f716ec1556c71c57f01c5f80fe.js IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeJavaScript source, ASCII text, with very long lines (65446) Hash91ddd2502dc90b0303954d9962144f58 d60c5a6d6c3cf2d8472515876889bc3b321dc012 6836d82c2675416ff3baac14cb9f03e7adedd39b167ac1154a73148ed1e65412
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/breeze-minification/js/breeze_c04eb7f716ec1556c71c57f01c5f80fe.js HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:34 GMT
content-type: application/javascript
last-modified: Sun, 31 Mar 2024 20:44:23 GMT
vary: Accept-Encoding
etag: W/"6609cb27-15602"
cache-control: public, max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gbwhats.in/wp-content/uploads/2022/10/gbwhatsapp-download-page.webp | 139.59.8.127 | 200 OK | 20 kB |
URL GET HTTP/2gbwhats.in/wp-content/uploads/2022/10/gbwhatsapp-download-page.webp IP139.59.8.127:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectgbwhats.in FingerprintDA:64:F4:D5:88:BD:83:1A:C4:A8:93:7B:D7:94:E7:8C:5A:73:8D:0C ValiditySat, 13 Apr 2024 15:19:37 GMT - Fri, 12 Jul 2024 15:19:36 GMT
File typeRIFF (little-endian) data, Web/P image Hash256a680605c06d6cd08311f717c721b5 15402b8a0d51af63a2e64963eef8b954c89aa620 f0fb5b4f8034052139fc597564b6bc20876377d52d0434a428b848124eedf059
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | WhatsApp | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2022/10/gbwhatsapp-download-page.webp HTTP/1.1
Host: gbwhats.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbwhats.in/
DNT: 1
Connection: keep-alive
Cookie: pll_language=en
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 04:34:35 GMT
content-type: image/webp
content-length: 20202
last-modified: Thu, 02 Nov 2023 01:30:41 GMT
etag: "6542fbc1-4eea"
cache-control: public, max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
0.0.0.0