# PhishDestroy domain threat record: go2-whatsapp.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/go2-whatsapp.com/
Machine-readable companion: https://phishdestroy.io/domain/go2-whatsapp.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-23 01:36:51 UTC
- Last availability or vendor check: 2026-10-28 00:12:52 UTC
- Stored record updated: 2026-10-28 00:12:52 UTC
- VirusTotal detections in the stored snapshot: 12/92
- Independent public blocklist matches in the stored snapshot: 2
- Matching public blocklists: MetaMask, SEAL
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: whatsapp

## Stored infrastructure

- Observed IP address: 23.248.221.118
- Registrar in stored WHOIS data: Vantage of Convergence (Chengdu) Technology Co., Ltd.
- Last stored HTTP status: 302
- Registration date (registry RDAP, go2-whatsapp.com): 2026-10-14 07:07:15 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a166c6-30ed-734d-b378-f1241c276e51/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/go2-whatsapp.com
- Certificate Transparency search: https://crt.sh/?q=%25.go2-whatsapp.com
- Web Archive lookup: https://web.archive.org/web/*/https://go2-whatsapp.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot from 2026-10-23 shows a plain search page branded Yandex with a field labeled Search with Yandex AI and a menu icon at the top right, while the page title recorded for the domain that day was WhatsApp web. PhishDestroy listed it after automated assessment classified the domain as impersonation, first seen on 2026-10-23.

How the scam works
The observed page acts as a redirect funnel: a visitor arriving through a WhatsApp-branded lure is bounced off-domain to a third-party search page instead of any legitimate service, a staging pattern common in credential-phishing chains. Because the lure borrows the WhatsApp name, anyone who trusts it may be steered onward into handing over login details or other sensitive information to an unrelated party.

Evidence
The screenshot shows no login form at all, only the search box and wordmark as observed on 2026-10-23. urlscan scored the domain 100 malicious under the phishing category with a WhatsApp brand label on 2026-10-23, and its machine-learning model tagged the capture. VirusTotal flagged the domain as malicious, with Sophos and ESET among the labelling vendors. Spamhaus listed it in the phishing category on 2026-10-23, MetaMask and SEAL appeared as external blocklists with PhishDestroy's internal blocklist set, checked 2026-10-26, and OTX carried 3 pulses on 2026-10-23. Google Safe Browsing did not flag it on 2026-10-26, a negative result that is not proof of safety. The redirect funnel ended off-domain at the Yandex-branded page with a 302 response on 2026-10-23, and the inspected stack recorded React, an advertising tracker and 4 requests.

Infrastructure
Registered on 2026-10-14 through Vantage of Convergence (Chengdu) Technology Co., Ltd., with hosting recorded on 2026-10-23 against Yancy Limited and a bsncdn server header. Notable weaknesses: no email authentication recorded, DNSSEC unsigned, and Referrer-Policy, Permissions-Policy, COOP, COEP and CORP all absent; TLS 1.3, AES-256-GCM, forward secrecy, ALPN h2; CSP and HSTS present, X-Frame-Options DENY, X-Content-Type-Options nosniff; CAA record present.

What to do
If you submitted information after opening this link, change your WhatsApp password on the genuine WhatsApp service and enable two-factor authentication, then review recent account activity and report messages you did not send. For defenders, block go2-whatsapp.com at proxy, mail and endpoint layers, and pivot on the recorded capture hash to find related captures.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a166c6-30ed-734d-b378-f1241c276e51/
Cloudflare Radar report: https://radar.cloudflare.com/scan/c4e1323b-7870-4fff-b514-3e3370fe589f
URLQuery report: https://urlquery.net/report/b843362b-de8b-4ec7-938e-5ef76656d893
Stored capture screenshot: https://i.ibb.co/PGS7rYmZ/b22f406d172e.png
Cloudflare Radar screenshot (2026-10-23T02:17:49Z): https://screenshots.phishdestroy.io/cf/c4e1323b-7870-4fff-b514-3e3370fe589f.png
URLQuery screenshot: https://screenshots.phishdestroy.io/uq/b843362b-de8b-4ec7-938e-5ef76656d893.png
URLScan screenshot (2026-10-17T19:37:17Z): https://screenshots.phishdestroy.io/us/01a14b5e-35b6-7328-96a8-41bd8cb1e87b.png
URLScan capture report: https://urlscan.io/result/01a14b5e-35b6-7328-96a8-41bd8cb1e87b/
URLScan screenshot (2026-10-20T09:30:56Z): https://screenshots.phishdestroy.io/us/01a158a6-3099-70da-beb7-78d712f3559b.png
URLScan capture report: https://urlscan.io/result/01a158a6-3099-70da-beb7-78d712f3559b/
URLScan screenshot (2026-10-20T23:26:20Z): https://screenshots.phishdestroy.io/us/01a15ba3-06ae-7184-b37d-b614fe26f370.png
URLScan capture report: https://urlscan.io/result/01a15ba3-06ae-7184-b37d-b614fe26f370/
URLScan screenshot (2026-10-22T03:19:58Z): https://screenshots.phishdestroy.io/us/01a1619f-46d9-703c-8c49-76e673bbae79.png
URLScan capture report: https://urlscan.io/result/01a1619f-46d9-703c-8c49-76e673bbae79/
URLScan screenshot (2026-10-22T15:29:39Z): https://screenshots.phishdestroy.io/us/01a1643a-e461-711e-b4c2-aad416889266.png
URLScan capture report: https://urlscan.io/result/01a1643a-e461-711e-b4c2-aad416889266/
URLScan screenshot (2026-10-23T02:27:00Z): https://screenshots.phishdestroy.io/us/01a16680-9872-772f-93b2-56ef8a17affa.png
URLScan capture report: https://urlscan.io/result/01a16680-9872-772f-93b2-56ef8a17affa/
VirusTotal report: https://www.virustotal.com/gui/domain/go2-whatsapp.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=go2-whatsapp.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 22:37:19 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/PGS7rYmZ/b22f406d172e.png
  Captured: 2026-10-23 03:21:19 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a166c6-30ed-734d-b378-f1241c276e51.png
  Captured: 2026-10-23 03:21:19 UTC
  Source report: https://urlscan.io/result/01a166c6-30ed-734d-b378-f1241c276e51/
- URLScan capture 2: https://urlscan.io/screenshots/01a16209-5136-7108-854e-17ac25dffde5.png
  Captured: 2026-10-23 01:36:51 UTC
  Source report: https://urlscan.io/result/01a166c6-30ed-734d-b378-f1241c276e51/
- URLScan · 2026-10-17: https://screenshots.phishdestroy.io/us/01a14b5e-35b6-7328-96a8-41bd8cb1e87b.png
  Captured: 2026-10-17 19:37:17 UTC
  Source report: https://urlscan.io/result/01a14b5e-35b6-7328-96a8-41bd8cb1e87b/
  SHA-256: 8c65152146b2b9baf2ff747490b5b560d8b47cd2a9d2e772711095e91a12971d
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a158a6-3099-70da-beb7-78d712f3559b.png
  Captured: 2026-10-20 09:30:56 UTC
  Source report: https://urlscan.io/result/01a158a6-3099-70da-beb7-78d712f3559b/
  SHA-256: e18d556e5704b3cff27a05e9bade346a49c529666fb4544a71d8ae4544eec612
- URLScan · 2026-10-20: https://screenshots.phishdestroy.io/us/01a15ba3-06ae-7184-b37d-b614fe26f370.png
  Captured: 2026-10-20 23:26:20 UTC
  Source report: https://urlscan.io/result/01a15ba3-06ae-7184-b37d-b614fe26f370/
  SHA-256: a9d9c9a9110416afaa761ed60fab1d576b81e856f14d18ae6e7992f30346ec8d
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1619f-46d9-703c-8c49-76e673bbae79.png
  Captured: 2026-10-22 03:19:58 UTC
  Source report: https://urlscan.io/result/01a1619f-46d9-703c-8c49-76e673bbae79/
  SHA-256: d5adfa4449b23d0238b1dc957cf6110257b0bf1f55218fcdb0ab7c7f50ab4bc3
- URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a1643a-e461-711e-b4c2-aad416889266.png
  Captured: 2026-10-22 15:29:39 UTC
  Source report: https://urlscan.io/result/01a1643a-e461-711e-b4c2-aad416889266/
  SHA-256: da629a446e722e02cb7e3d6fe936bc264d6e65a846d5978830af46be91d88a44
- URLScan · 2026-10-23: https://screenshots.phishdestroy.io/us/01a16680-9872-772f-93b2-56ef8a17affa.png
  Captured: 2026-10-23 02:27:00 UTC
  Source report: https://urlscan.io/result/01a16680-9872-772f-93b2-56ef8a17affa/
  SHA-256: 878512f62e0f640a2709f58c0459d0d07709397cdad59a2047fbc3575b29300d
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/c4e1323b-7870-4fff-b514-3e3370fe589f.png
  Captured: 2026-10-23 02:17:49 UTC
  Source report: https://radar.cloudflare.com/scan/c4e1323b-7870-4fff-b514-3e3370fe589f
  SHA-256: 41db967362c71ec1fcd2533928de31a81374472f4d3ee74f1f8367691daf004d
- URLQuery: https://screenshots.phishdestroy.io/uq/b843362b-de8b-4ec7-938e-5ef76656d893.png
  Source report: https://urlquery.net/report/b843362b-de8b-4ec7-938e-5ef76656d893
  SHA-256: c36cd580facb2569daf050a1a78ea884c79f8c2eb0cd13ba9c08660d769b20eb

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-23T03:26:23Z",
        "uuid": "01a166c6-30ed-734d-b378-f1241c276e51",
        "scanned_at": "2026-10-23T03:20:37Z",
        "final_url": "https://go2-whatsapp.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://go2-whatsapp.com/",
                "from": "http://go2-whatsapp.com/",
                "status": 307
            }
        ],
        "ip": "23.248.221.117",
        "domains": [
            "yunfeitongji.com.cn"
        ],
        "ips": [
            "23.248.221.118",
            "23.248.221.117"
        ],
        "asns": [
            "138415"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "v3-whatsapp.com",
            "www.v3-whatsapp.com",
            "www.kid-whatsapp.com",
            "www.wq-whatsapp.com",
            "g4-whatsapp.com",
            "www.tap-whatsapp.com",
            "tap-whatsapp.com",
            "www.g2-whatsapp.com",
            "www.hub2-whatsapp.com",
            "g9-whatsapp.com"
        ],
        "doc_hash": "c4e44871381423ee48e66f754a47ab227dba186cf2004da38f4bb5478012444b",
        "storage_keys": [
            "vs_7a07f323b705bfadbb67b765dde3bd4b_sid",
            "vs_7a07f323b705bfadbb67b765dde3bd4b_vid"
        ],
        "tls": {
            "san": [
                "*.go2-whatsapp.com",
                "go2-whatsapp.com"
            ],
            "cipher": "AES_256_GCM",
            "issuer": "YR2",
            "subject": "go2-whatsapp.com",
            "protocol": "TLS 1.3",
            "valid_to": "2027-01-12T06:35:45Z",
            "valid_from": "2026-10-14T06:35:46Z"
        },
        "domain_age_days": 7,
        "apex_age_days": 7,
        "tls_age_days": 8,
        "tls_valid_days": 89,
        "requests": 4,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 100,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "whatsapp"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "WhatsApp"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "bsncdn",
            "content-type": "text/html; charset=utf-8",
            "strict-transport-security": "max-age=31536000"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-23T02:24:26Z",
        "uuid": "c4e1323b-7870-4fff-b514-3e3370fe589f",
        "scanned_at": "2026-10-23T02:17:49Z",
        "final_url": "https://yandex.com/",
        "status": 200,
        "redirected": "off-domain",
        "history": [
            {
                "url": "https://go2-whatsapp.com/",
                "status": 302
            },
            {
                "url": "https://yandex.com/",
                "status": 200
            }
        ],
        "dom_hash": "0366a3681c276cf265056e4583c35816c34257adb87cec2db18518cf75d15be5",
        "doc_hash": "7b3952724f715f6274bef2c5128c048d3d7da7757906f6b2da8749665e17fd70",
        "domain_risks": [
            "Search Engines",
            "Technology",
            "Webmail",
            "Internet Communication"
        ],
        "radar_rank": {
            "bucket": "500"
        },
        "dns": [
            {
                "name": "yandex.com",
                "type": "A",
                "value": "77.88.44.55"
            },
            {
                "name": "yandex.com",
                "type": "A",
                "value": "77.88.55.88"
            },
            {
                "name": "yandex.com",
                "type": "A",
                "value": "5.255.255.77"
            },
            {
                "name": "yandex.com",
                "type": "AAAA",
                "value": "2a02:6b8:a::a"
            }
        ],
        "dnssec_valid": false,
        "ip": "77.88.44.55",
        "whois": {
            "registrar": "Regional Network Information Center, JSC dba RU-CENTER",
            "created": "1998-09-24T04:00:00Z",
            "updated": "2026-09-22T01:56:18Z",
            "expires": "2027-09-23T04:00:00Z",
            "nameservers": [
                "ns1.yandex.net",
                "ns2.yandex.net"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-23T03:23:25Z",
        "analysis_at": "2026-10-21T16:26:45Z",
        "stats": {
            "timeout": 0,
            "harmless": 47,
            "malicious": 9,
            "suspicious": 3,
            "undetected": 33
        },
        "detections": {
            "CRDF": "malicious",
            "ESET": "suspicious",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "phishing",
            "Fortinet": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "phishing",
            "Gridinsoft": "suspicious",
            "alphaMountain.ai": "spam",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "registrar": "Vantage of Convergence (Chengdu) Technology Co., Ltd.",
        "created": "2026-10-14T07:07:15Z",
        "expires": "2027-10-14T07:07:15Z",
        "updated": "2026-10-14T07:29:54Z",
        "first_seen": "2026-10-14T10:37:22Z",
        "dns": [
            {
                "ttl": 120,
                "type": "CNAME",
                "value": "sndzf4xu.asd-asd-asd.com"
            },
            {
                "ttl": 7200,
                "type": "NS",
                "value": "n2.xundns.com"
            },
            {
                "ttl": 7200,
                "type": "SOA",
                "rname": "nsadmin.xundns.com",
                "value": "n1.xundns.com"
            },
            {
                "ttl": 7200,
                "type": "NS",
                "value": "n1.xundns.com"
            },
            {
                "ttl": 120,
                "type": "A",
                "value": "23.248.221.117"
            },
            {
                "ttl": 120,
                "type": "A",
                "value": "23.248.221.118"
            },
            {
                "ttl": 600,
                "type": "CNAME",
                "value": "hprvn96u.svip666.asd-asd-asd.com"
            }
        ],
        "dns_at": "2026-10-21T16:27:21Z",
        "jarm": "29d29d00029d29d21c42d42d000000bdfc58c9a46434368cf60aa440385763",
        "cert": {
            "san": [
                "*.go2-whatsapp.com",
                "go2-whatsapp.com"
            ],
            "issuer": "Let's Encrypt / YR2",
            "serial": "686b8e0fc2625f1629faa8e3bc060641ca8",
            "sha256": "99bb5b6fd54c88f709e818c4d749ee0ed3822f82549f635550a6cd4d35bc6c4e",
            "subject": "go2-whatsapp.com",
            "valid_to": "2027-01-12T06:35:45Z",
            "valid_from": "2026-10-14T06:35:46Z"
        },
        "whois": {
            "registrar": "Vantage of Convergence (Chengdu) Technology Co., Ltd.",
            "registrar_iana_id": "3869",
            "registrar_url": "http://www.kh86.cn",
            "created": "2026-10-14T07:07:15Z",
            "updated": "2026-10-14T07:29:54Z",
            "expires": "2027-10-14T07:07:15Z",
            "status": [
                "ok"
            ],
            "nameservers": [
                "n1.xundns.com",
                "n2.xundns.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "active"
            ],
            "events": {
                "expiration": "2027-10-14T07:07:15Z",
                "last changed": "2026-10-14T07:10:16Z",
                "registration": "2026-10-14T07:07:15Z",
                "registrar expiration": "2027-10-14T07:07:15Z",
                "last update of RDAP database": "2026-10-21T15:08:04Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-23T02:24:42Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "go2-whatsapp.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-14T19:01:56Z",
            "first": "2026-10-14T19:01:56Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 522
        },
        "robots_txt": {
            "agents": [
                "*",
                "Sogou",
                "Baiduspider",
                "Googlebot",
                "bingbot"
            ],
            "present": true
        },
        "social_tags": {
            "ogUrl": "https://yandex.com",
            "title": "Yandex — fast Internet search",
            "ogType": "website",
            "ogImage": "https://yastatic.net/s3/home-static/_/nova3/JSRBlH1m.png",
            "ogTitle": "Yandex",
            "ogSiteName": "Yandex",
            "description": "Yandex finds anything: webpages, images, music, good. Solve any problem — from everyday to a scientific one. Search by text, voice or image.",
            "ogDescription": "Yandex is a technology company that builds intelligent products and services powered by machine learning. Our goal is to help consumers and businesses better navigate the online and offline world. Since 1997, we have delivered world-class, locally relevant search and information services. Additional"
        },
        "trackers": {
            "requests": 19,
            "trackers": [
                {
                    "name": "Yandex",
                    "company": "Yandex",
                    "country": "RU",
                    "category": "Advertising",
                    "requests": 16
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://yastatic.net/s3/home-static/_/nova3/20cfa3378ae22956fc1caed8d662c3e97d534cbceb8f5dc08b0b1139f2ba6fc0.js",
                "https://yastatic.net/s3/home-static/_/nova3/e0cc5a2225b49509f557f28449aba906910622f7d6d366178580391b34f63fec.js",
                "https://yastatic.net/react/19.2.4/react-with-dom.min.js"
            ],
            "third_party_scripts": 3
        },
        "status": {
            "up": true,
            "code": 302,
            "timings": {
                "dns": 1184,
                "tls": 198,
                "wait": 194,
                "connect": 184,
                "download": 0
            },
            "response_ms": 1760
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 330389,
            "co2_grams": 0.0121,
            "cleaner_than": 1
        },
        "cookies": {
            "cookies": [
                {
                    "name": "yandex_gid",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "yp",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "yuidss",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "is_gdpr",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "is_gdpr_b",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "_yasc",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "pi",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "i",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "yandexuid",
                    "secure": true,
                    "same_site": "None"
                },
                {
                    "name": "yashr",
                    "secure": true,
                    "http_only": true,
                    "same_site": "None"
                },
                {
                    "name": "bh",
                    "secure": true,
                    "same_site": "None"
                }
            ]
        },
        "location": {
            "ip": "23.248.221.118",
            "asn": "138415",
            "org": "Yancy Limited",
            "city": "New York",
            "country": "US"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YR2",
            "subject": "go2-whatsapp.com"
        },
        "dns": {
            "A": [
                "23.248.221.117",
                "23.248.221.118"
            ],
            "CNAME": [
                "hprvn96u.svip666.asd-asd-asd.com"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000",
            "message": "HSTS header does not include all subdomains."
        },
        "http_security": {
            "xFrameOptions": "DENY",
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": "media-src yastatic.net;connect-src *.strm.yandex.net mc.yandex.com yandex.com surveys.yandex.ru yastatic.net yastat.net",
            "strictTransportPolicy": "max-age=31536000; includeSubDomains",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "23.248.221.118",
            "family": 4
        },
        "redirects": {
            "chain": [
                "https://go2-whatsapp.com",
                "https://yandex.com/"
            ],
            "count": 1
        },
        "tech_stack": {
            "technologies": [
                "React",
                "HSTS",
                "PWA",
                "Open Graph"
            ]
        },
        "linked_pages": {
            "external": [
                "https://passport.yandex.com/auth",
                "https://yandex.com/images/",
                "https://yandex.com/video/",
                "https://yandex.com/maps/",
                "https://translate.yandex.com/",
                "https://meteum.ai/",
                "https://mail.yandex.com/",
                "https://yandex.com/games/",
                "https://yandex.com/all"
            ],
            "external_count": 9
        },
        "whois": {
            "registrar": "Vantage of Convergence (Chengdu) Technology Co., Ltd.",
            "created": "2026-10-14T07:07:15Z",
            "updated": "2026-10-14T07:29:54Z",
            "expires": "2027-10-14T07:07:15Z",
            "status": [
                "ok https://icann.org/epp"
            ],
            "nameservers": [
                "n1.xundns.com",
                "n2.xundns.com"
            ]
        },
        "headers": {
            "headers": {
                "content-type": "text/html; charset=UTF-8",
                "strict-transport-security": "max-age=31536000; includeSubDomains",
                "content-security-policy": "media-src yastatic.net;connect-src *.strm.yandex.net mc.yandex.com yandex.com surveys.yandex.ru yastatic.net yastat.net mc.yandex.ru *.mc.yandex.ru adstat.yandex.ru mc.admetrica.ru wss://mc.yandex.ru wss://mc.yandex.com yandexmetrica.com:* *.yandex.net an.yandex.ru yandex.ru;img-src *.verify.yandex.",
                "x-frame-options": "DENY",
                "x-content-type-options": "nosniff"
            }
        }
    }
}
```