# bue-whatsapp.com - Chinese WhatsApp Web desktop sync guide | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/bue-whatsapp.com/ Machine-readable companion: https://phishdestroy.io/domain/bue-whatsapp.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: Last known active - First observed by PhishDestroy: 2026-11-11 23:01:29 UTC - Selected availability observation: 2026-11-11T23:01:29Z - Stored record updated: 2026-11-12 03:21:26 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 1 - Matching public blocklists: Phishunt - Google Safe Browsing stored result: checked_clean ## Stored labels and detections - Automated brand label (collector metadata; not a confirmed impersonation finding): whatsapp ## Stored infrastructure - Observed IP address: 66.203.149.22 - Registrar in stored WHOIS data: GKG.Net, Inc. - Last stored HTTP status: 302 (observed: 2026-11-11T23:01:29Z) - Registration date in stored WHOIS data: 2026-10-09 20:17:56 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a1ccd6-6c2c-7369-9119-9311ae240c2e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bue-whatsapp.com - Certificate Transparency search: https://crt.sh/?q=%25.bue-whatsapp.com - Web Archive lookup: https://web.archive.org/web/*/https://bue-whatsapp.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy records bue-whatsapp.com as a Chinese-language page presenting a guide to WhatsApp Web desktop synchronization and its login flow. On 2026-11-11, bue-whatsapp.com displayed a Chinese-language article page branded "WhatsApp Web" with a navigation bar linking to sections such as what it is, login flow, suitability, comparisons, cautions and FAQs. The headline describes moving ongoing phone conversations to a larger screen, and the text explains that WhatsApp Web mirrors messages to a desktop browser rather than replacing the phone account, noting that the desktop side still depends on the phone being online. The stored VirusTotal domain result reports 15 detections out of 92 engines. CRDF reported "malicious"; DNS8 reported "phishing". Package revision: 3086908b197a9045b975c45716ae1ba9ca8d6ff6c1f7f284edf9b6bcca131c4c Text generated (not scan time): 2026-11-12 00:47:45 Reviewed evidence snapshot: {"domain":"bue-whatsapp.com","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"bue-whatsapp.com","final_host":"bue-whatsapp.com","redirects":[{"to":"https://bue-whatsapp.com/","from":"http://bue-whatsapp.com/","status":307}],"captured_at":"2026-11-11T22:59:33.952000Z","uuid":"01a1ccd6-6c2c-7369-9119-9311ae240c2e","report_url":"https://urlscan.io/result/01a1ccd6-6c2c-7369-9119-9311ae240c2e/","sha256":"65ef4d10fe3b6b51c3be2c4c45df24f981bd137f08747a8b9c0aee5f1f1e819d","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","virustotal":{"scope":"domain","detections":15,"engines":92,"malicious":14,"suspicious":1,"analysis_date":"2026-11-11","retrieved_date":"2026-11-12","vendor_labels":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"flagging_vendors":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 15 detections out of 92 engines. CRDF reported \"malicious\"; DNS8 reported \"phishing\".","page_paragraph_target_characters":549} Source facts (timestamps as stored): {"record_id":1928496,"first_recorded_at":"2026-11-12 00:01:29","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":14,"suspicious":1,"vendors":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-11-11T18:33:00Z","checked_at":null,"fetched_at":"2026-11-11T23:39:40Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["alphaMountain.ai","BitDefender","CRDF","DNS8","ESET","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-11-11 18:33:00","checked_at":"2026-11-12 00:39:41","fetched_at":"2026-11-11 23:39:41","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"CRDF":"malicious","DNS8":"phishing","ESET":"phishing","VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"phishing","Seclookup":"malicious","Gridinsoft":"suspicious","BitDefender":"phishing","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"vendor_names":["CRDF","DNS8","ESET","VIPRE","G-Data","Lionic","Sophos","Webroot","Fortinet","SOCRadar","Seclookup","Gridinsoft","BitDefender","alphaMountain.ai","Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":45,"malicious":14,"suspicious":1,"undetected":32}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-12 00:40:25"},"spamhaus":{"source":"Spamhaus","verdict":"DBL_PHISH","checked_at":"2026-11-12 00:35:11"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1928496,"scope":"checked_url","observed_at":"2026-11-11T23:01:29Z","http_status":302,"http_observed_at":"2026-11-11T23:01:29Z","stored_http_code":302,"stored_http_observed_at":"2026-11-11T23:01:29Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}} ## Stored page captures - URLScan · 2026-11-11: https://screenshots.phishdestroy.io/us/01a1ccd6-6c2c-7369-9119-9311ae240c2e.png Captured: 2026-11-11 22:59:33 UTC Source report: https://urlscan.io/result/01a1ccd6-6c2c-7369-9119-9311ae240c2e/ SHA-256: 65ef4d10fe3b6b51c3be2c4c45df24f981bd137f08747a8b9c0aee5f1f1e819d - URLScan · 2026-10-21 → www.bing.com: https://screenshots.phishdestroy.io/us/01a1609b-32d9-7488-a117-a0c8946d845a.png Captured: 2026-10-21 22:35:58 UTC Source report: https://urlscan.io/result/01a1609b-32d9-7488-a117-a0c8946d845a/ SHA-256: 1b61884d98388577a315df207aa2850aee73499afebadec61e968c39adf7cae0 - URLScan · 2026-10-22 → www.bing.com: https://screenshots.phishdestroy.io/us/01a16298-1945-7659-a8e5-077cefc34331.png Captured: 2026-10-22 07:51:52 UTC Source report: https://urlscan.io/result/01a16298-1945-7659-a8e5-077cefc34331/ SHA-256: ae5b972ba86752faf74d879b6943dd01858d28ed41cad48ae0b1530f69afad4f - URLScan · 2026-10-24 → www.bing.com: https://screenshots.phishdestroy.io/us/01a16e61-8409-745f-8a50-9eead6d6cf06.png Captured: 2026-10-24 14:47:36 UTC Source report: https://urlscan.io/result/01a16e61-8409-745f-8a50-9eead6d6cf06/ SHA-256: cbaeb566ba52e7dbc5cfe968c3a1ec4b93be03aa5b30e51127596a6051f82468 - URLScan · 2026-10-29 → www.bing.com: https://screenshots.phishdestroy.io/us/01a1889f-562d-7538-9d17-1b9686773379.png Captured: 2026-10-29 17:05:15 UTC Source report: https://urlscan.io/result/01a1889f-562d-7538-9d17-1b9686773379/ SHA-256: 3610c26fc6e802819f82161b69b2dc3b22bed74efe0c7cc98003d4563753b0ed - URLScan · 2026-10-29 → www.bing.com: https://screenshots.phishdestroy.io/us/01a1889f-d76f-77b8-a1cd-7e0fbb02424a.png Captured: 2026-10-29 17:05:55 UTC Source report: https://urlscan.io/result/01a1889f-d76f-77b8-a1cd-7e0fbb02424a/ SHA-256: a6b89db95105e55fe7962455eeaf97f7f27efe010a68990523ae3686a7555fba - URLScan · 2026-11-03 → consent.yahoo.com: https://screenshots.phishdestroy.io/us/01a19ee8-cf9a-75ca-8e73-4f727c0bca3c.png Captured: 2026-11-03 00:57:07 UTC Source report: https://urlscan.io/result/01a19ee8-cf9a-75ca-8e73-4f727c0bca3c/ SHA-256: 3deb0675210f8ec8bc327e6a2c3aff62f4b5cee3385fd0b29e7a8b2c0b9e07c2 - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/734c247a-ab4e-4e4b-9053-5ad903792ecc.png Captured: 2026-11-11 23:41:27 UTC Source report: https://radar.cloudflare.com/scan/734c247a-ab4e-4e4b-9053-5ad903792ecc SHA-256: e47b5aa99a3e42fa5bcd02554f2bb191b415eb468ca8bcab06dfc028de435bba - URLQuery: https://screenshots.phishdestroy.io/uq/1cab74db-5511-4af4-b630-6daafb092f28.png Source report: https://urlquery.net/report/1cab74db-5511-4af4-b630-6daafb092f28 SHA-256: 686a5210ecfc4c5eab472f59a452404adb15dc4abc519847fa55707065355a44 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-11T23:04:41Z", "uuid": "01a1ccd6-6c2c-7369-9119-9311ae240c2e", "scanned_at": "2026-11-11T22:59:33Z", "final_url": "https://bue-whatsapp.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://bue-whatsapp.com/", "from": "http://bue-whatsapp.com/", "status": 307 } ], "ip": "66.203.149.22", "ips": [ "66.203.149.22" ], "asns": [ "59371" ], "countries": [ "HK" ], "link_domains": [ "wiki.bue-whatsapp.com", "mail.bue-whatsapp.com", "shop.bue-whatsapp.com", "staticvip.bue-whatsapp.com", "mini-msg.bue-whatsapp.com", "store.bue-whatsapp.com", "old.bue-whatsapp.com", "customer.bue-whatsapp.com", "origin.socket-whatsapp.com.cn", "app.appview-whatsapp.com", "query.nodecdn-whatsapp.com", "guide.netuse-whatsapp.com", "app.yk-whatsapp.com", "origin.micro-whatapps.com", "guide.sale-whatsapp.com", "asset.signal-whatsapp.com", "legacy.unix-whatsapp.com.cn", "guide.pipe-whotsapp.com", "app.storage-whatsapp.hl.cn", "web.zn-whatsapp.com" ], "doc_hash": "7eaf2a1c0bd02500572b2f2571cfb6d66be51e88b08a33674ae1498b5ef18308", "tls": { "san": [ "bue-whatsapp.com" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "bue-whatsapp.com", "protocol": "TLS 1.3", "valid_to": "2027-01-16T09:25:04Z", "valid_from": "2026-10-18T09:25:05Z" }, "domain_age_days": 32, "apex_age_days": 32, "tls_age_days": 24, "tls_valid_days": 89, "requests": 2, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-2aab354" ], "score": 99, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "whatsapp" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "WhatsApp" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "jdcdn", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000" } }, "cf": { "v": 1, "fetched_at": "2026-11-11T23:46:59Z", "uuid": "734c247a-ab4e-4e4b-9053-5ad903792ecc", "scanned_at": "2026-11-11T23:41:27Z", "final_url": "https://tw.yahoo.com/", "status": 200, "redirected": "off-domain", "history": [ { "url": "https://bue-whatsapp.com/", "status": 302 }, { "url": "https://tw.yahoo.com/", "status": 200 } ], "dom_hash": "2a211a78efcfe8e61bfe655b6cf4c4e9da55a09d81d60f39e3dd57a0c0e9a8c0", "doc_hash": "8cd1945ce7fb618fea571c8058465202dcbececa59bf352a0ac2a983272c7536", "domain_risks": [ "News & Media", "Entertainment" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bats.video.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "bats.video.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "geo.yahoo.com", "type": "CNAME", "value": "geo-atsv2.media.g03.yahoodns.net" }, { "name": "geo.yahoo.com", "type": "CNAME", "value": "geo-atsv2.media.g03.yahoodns.net" }, { "name": "guce.yahoo.com", "type": "CNAME", "value": "real.rotation.guce.aws.oath.cloud" }, { "name": "guce.yahoo.com", "type": "CNAME", "value": "real.rotation.guce.aws.oath.cloud" }, { "name": "loc.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "loc.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "nexus-gateway-prod.media.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "nexus-gateway-prod.media.yahoo.com", "type": "CNAME", "value": "edge.gycpi.b.yahoodns.net" }, { "name": "noa.yahoo.com", "type": "CNAME", "value": "noa-atsv2.media.g03.yahoodns.net" }, { "name": "noa.yahoo.com", "type": "CNAME", "value": "noa-atsv2.media.g03.yahoodns.net" }, { "name": "opus.analytics.yahoo.com", "type": "CNAME", "value": "opus-tag-prod.dcs-core-dmp-prd.aws.oath.cloud" }, { "name": "opus.analytics.yahoo.com", "type": "CNAME", "value": "opus-tag-prod.dcs-core-dmp-prd.aws.oath.cloud" }, { "name": "pbd.yahoo.com", "type": "CNAME", "value": "edge-prebid-pbd.g03.yahoodns.net" } ], "dnssec_valid": false, "ip": "87.248.116.12", "whois": { "registrar": "MarkMonitor Inc.", "created": "1995-01-18T05:00:00Z", "updated": "2025-12-18T09:16:39Z", "expires": "2027-01-19T05:00:00Z", "nameservers": [ "ns1.yahoo.com", "ns2.yahoo.com", "ns3.yahoo.com", "ns4.yahoo.com", "ns5.yahoo.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-11T23:39:40Z", "analysis_at": "2026-11-11T18:33:00Z", "stats": { "timeout": 0, "harmless": 45, "malicious": 14, "suspicious": 1, "undetected": 32 }, "detections": { "CRDF": "malicious", "DNS8": "phishing", "ESET": "phishing", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "Gridinsoft": "suspicious", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "GKG.Net, Inc.", "created": "2026-10-09T22:17:56Z", "expires": "2027-10-09T22:17:56Z", "updated": "2026-10-10T02:29:52Z", "first_seen": "2026-10-10T11:47:13Z", "dns": [ { "ttl": 600, "type": "CNAME", "value": "edmnz9wf.vip8899.abc2027aa.ru" }, { "ttl": 120, "type": "CNAME", "value": "htau8w23.abc2027aa.ru" }, { "ttl": 7200, "type": "NS", "value": "n1.xundns.com" }, { "ttl": 7200, "type": "SOA", "rname": "nsadmin.xundns.com", "value": "n1.xundns.com" }, { "ttl": 7200, "type": "NS", "value": "n2.xundns.com" }, { "ttl": 119, "type": "CNAME", "value": "htau8w23.abc2027aa.ru" }, { "ttl": 599, "type": "CNAME", "value": "edmnz9wf.vip8899.abc2027aa.ru" }, { "ttl": 120, "type": "A", "value": "66.203.149.22" } ], "dns_at": "2026-11-11T19:14:03Z", "jarm": "29d29d00029d29d00042d42d0000002059a3b916699461c5923779b77cf06b", "cert": { "san": [ "bue-whatsapp.com" ], "issuer": "Let's Encrypt / YR1", "serial": "5154a0b808c1af5831e5b113caf3bd064f1", "sha256": "90d75b4acebdb879aaf31e5251004b118f66b8eb52dd4557fb27f395eb3556bc", "subject": "bue-whatsapp.com", "valid_to": "2027-01-16T09:25:04Z", "valid_from": "2026-10-18T09:25:05Z", "observed_at": "2026-11-11T19:14:03Z" }, "whois": { "registrar": "GKG.Net, Inc.", "registrar_iana_id": "93", "registrar_url": "http://www.gkg.net", "created": "2026-10-09T22:17:56Z", "updated": "2026-10-10T02:29:52Z", "expires": "2027-10-09T22:17:56Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "n1.xundns.com", "n2.xundns.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "client transfer prohibited" ], "events": { "expiration": "2027-10-09T22:17:56Z", "last changed": "2026-10-10T02:29:52Z", "registration": "2026-10-09T22:17:56Z", "last update of RDAP database": "2026-11-05T14:32:48Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-11-11T23:15:49Z", "mail_config": { "spf_lookups": 0 }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-12T01:41:38Z", "first": "2026-10-11T14:23:41Z", "changes": 0, "days_archived": 2, "scans_per_day": 2.12, "avg_page_bytes": 539 }, "robots_txt": { "agents": [ "*", "Sogou", "Baiduspider", "Googlebot", "bingbot" ], "present": true, "sitemaps": [ "https://bue-whatsapp.com/sitemap.xml" ] }, "social_tags": { "title": "Yahoo", "ogImage": "https://s.yimg.com/cv/apiv2/social/images/yahoo_default_logo.png", "ogTitle": "Yahoo", "description": "Yahoo Yahoo奇摩 提供即時新聞、氣象、購物、信箱、搜尋、政治、國際、運動、股市、娛樂、科技、電影、汽機車、旅遊、遊戲。每天賺奇摩值、發掘更多精彩內容、一站獲取豐富生活！", "twitterCard": "summary_large_image", "canonicalUrl": "https://tw.yahoo.com/", "ogDescription": "Yahoo Yahoo奇摩 提供即時新聞、氣象、購物、信箱、搜尋、政治、國際、運動、股市、娛樂、科技、電影、汽機車、旅遊、遊戲。每天賺奇摩值、發掘更多精彩內容、一站獲取豐富生活！" }, "trackers": { "requests": 8, "trackers": [ { "name": "Yahoo!", "company": "Yahoo", "country": "US", "category": "Site Analytics", "requests": 6 } ] }, "mixed_content": { "no_sri": [ "https://s.yimg.com/ss/analytics3.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/87c73c54-8f6887dee1c014ac.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/893-ae963d921fae5cdf.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/main-app-2403a1c1e49e8ea1.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/app/global-error-a1464c1ee5e740a7.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/876-8086014c7430f856.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/197-e6fd4e91b7f225d2.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/233-2a307e65545dfb12.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/305-c7feb0852a6baa21.js", "https://s.yimg.com/br/next-app-socrates-fp/_next/static/chunks/354-db1beac9d38f1f40.js" ], "third_party_scripts": 22 }, "status": { "up": true, "code": 302, "timings": { "dns": 377, "tls": 181, "wait": 212, "connect": 171, "download": 0 }, "response_ms": 941 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 80, 443 ] }, "carbon": { "bytes": 17228, "co2_grams": 0.0006, "cleaner_than": 60 }, "cookies": { "cookies": [ { "name": "dflow", "secure": true, "http_only": true, "same_site": "Lax" }, { "name": "GUCS", "secure": true } ] }, "location": { "ip": "66.203.149.22", "asn": "59371", "org": "Dimension Network & Communication Limited", "city": "Hong Kong", "country": "HK" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "bue-whatsapp.com" }, "dns": { "A": [ "66.203.149.22" ], "CNAME": [ "edmnz9wf.vip8899.abc2027aa.ru" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "header": "max-age=31536000", "message": "HSTS header does not include all subdomains." }, "http_security": { "xFrameOptions": "SAMEORIGIN", "referrerPolicy": "no-referrer-when-downgrade", "xXSSProtection": "1; mode=block", "permissionsPolicy": false, "xContentTypeOptions": "nosniff", "contentSecurityPolicy": "frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.intheknow.com https://*.autoblog.com ht", "strictTransportPolicy": "max-age=31536000", "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "66.203.149.22", "family": 4 }, "redirects": { "chain": [ "https://bue-whatsapp.com", "https://tw.yahoo.com/" ], "count": 1 }, "tech_stack": { "technologies": [ "HSTS", "DigiCert" ] }, "linked_pages": { "external": [ "https://tw.tv.yahoo.com/", "https://tw.buy.yahoo.com/activity/activity950", "https://login.yahoo.com/", "https://mail.yahoo.com/", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "http://tw.search.yahoo.com/search", "https://tw.news.yahoo.com/", "https://tw.stock.yahoo.com/", "https://tw.sports.yahoo.com/", "https://tw.bid.yahoo.com/", "https://tw.buy.yahoo.com/", "https://autos.yahoo.com.tw/" ], "external_count": 119 }, "whois": { "registrar": "GKG.Net, Inc.", "created": "2026-10-09T22:17:56Z", "updated": "2026-10-10T02:29:52Z", "expires": "2027-10-09T22:17:56Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "n1.xundns.com", "n2.xundns.com" ] }, "headers": { "headers": { "server": "ATS", "content-type": "text/html; charset=utf-8", "strict-transport-security": "max-age=31536000", "content-security-policy": "frame-ancestors 'self' https://*.builtbygirls.com https://*.rivals.com https://*.intheknow.com https://*.autoblog.com https://*.techcrunch.com https://*.yahoo.com https://*.aol.com https://*.huffingtonpost.com https://*.oath.com https://*.search.yahoo.com https://*.pnr.ouryahoo.com https://pnr.ourya", "x-frame-options": "SAMEORIGIN", "x-content-type-options": "nosniff", "referrer-policy": "no-referrer-when-downgrade", "link": "; rel=\"preload\"; as=\"script\", ; rel=\"preload\"; as=\"script\", ; rel=\"preload\"; as=\"script\",