{"report_id":"355fabca-331b-492f-a9a1-990418be919c","version":6,"status":"done","tags":[],"date":"2025-12-20T07:10:44Z","url":{"schema":"http","addr":"us05webzoom.org","fqdn":"us05webzoom.org","domain":"us05webzoom.org","tld":"org"},"ip":{"addr":"131.153.148.82","port":0,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"us05webzoom.org/","fqdn":"us05webzoom.org","domain":"us05webzoom.org","tld":"org"},"title":"Zoom – Ready to get started?","dom":{"size":5181,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1fba163ed70d1a5c477e3f2a1929b22b","sha1":"4a3f71e73f1ae930b264e0d555b611d7b9154c02","sha256":"f2609d96e5f10e88d7798f3d05f2a261f6f31a263962595458bee71e05a866a5","sha512":"3b65d9f745adb05afb273c3d8d6873d5b657ef6f3077469c26b2dafde40a297f9d313f4647337bc5221d308fd2c6251f8f7d4724bb82d8f2adf7abab9d206a40","ssdeep":"96:nL6c+JebTOe6TugN9F3L3VJxCgiihWI7ot/iMrFQn:X2ebTp6rN9lLDEgiihWpt/iSun","tlshash":"7eb1b68a27b3102abd53d2b433eb271a3221d547c11bdd6a36d45264cfc63f8a6939cc","dom_hash":"domhashfcc004fdf9ac96a6d2cd3a27b92a96ed","first_seen":"2025-12-20T07:10:47.478915Z","last_seen":"2025-12-20T07:10:47.478915Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us05webzoom.org","fqdn":"us05webzoom.org","domain":"us05webzoom.org","tld":"org"},"ip":{"addr":"131.153.148.82","port":0,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T07:10:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"us05webzoom.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"us05webzoom.org","ip":{"addr":"131.153.148.82","port":443,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"domain_registered":"2025-12-17","domain_rank":0,"first_seen":"2025-12-20T07:10:44.729354Z","last_seen":"2025-12-20T07:10:44.729354Z","alert_count":2,"request_count":2,"received_data":5958,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us05webzoom.org/","fqdn":"us05webzoom.org","domain":"us05webzoom.org","tld":"org"},"ip":{"addr":"131.153.148.82","port":443,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T07:10:23.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us05webzoom.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 19:32:02 GMT","end":"Tue, 17 Mar 2026 19:32:01 GMT"},"fingerprint":{"sha1":"22:48:F0:5C:D3:C9:8B:7D:C9:1D:10:AD:DD:7A:17:74:9C:CA:7F:A2","sha256":"03:F5:28:38:47:07:FA:B8:4D:2A:13:3A:45:A8:3C:91:46:D9:B5:6E:BD:E8:B6:C4:EB:91:CE:C7:E8:5E:5A:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us05webzoom.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 20 Dec 2025 07:10:23 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 19 Dec 2025 00:30:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5200\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5200,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"e6d9e37d1ee05055e87052c33c39be66","sha1":"a8ec16fa5f398ce81211bcb543bc1a52f4dbdcd8","sha256":"636d51643a12a1d0e8a5b30b9276548c1dc4443deafb4fe00d6cf9a56e129877","sha512":"ded314a8f66b95c0b15a96b70f0a49fb3fd745b76858bb85775c5ad95b572a074c2b4fded317d9999ae01a42100c24f72ae72590fbf0b5e0dd150e8e392dca34","ssdeep":"96:H6c+JebTOe6TugN9F3L3VJxCgiihWI7ot/idiFQr:j2ebTp6rN9lLDEgiihWpt/isur","tlshash":"f9b1b58a27b3102abd53d2b433eb271a3221d147c11bdd6a36d45265cfc63e8a6939cc","first_seen":"2025-12-20T07:10:47.479976Z","last_seen":"2025-12-20T07:10:47.479976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":222,"dns":31,"connect":92,"send":0,"wait":99,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"us05webzoom.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us05webzoom.org/favicon.ico","fqdn":"us05webzoom.org","domain":"us05webzoom.org","tld":"org"},"ip":{"addr":"131.153.148.82","port":443,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us05webzoom.org/","date":"2025-12-20T07:10:23.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us05webzoom.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 19:32:02 GMT","end":"Tue, 17 Mar 2026 19:32:01 GMT"},"fingerprint":{"sha1":"22:48:F0:5C:D3:C9:8B:7D:C9:1D:10:AD:DD:7A:17:74:9C:CA:7F:A2","sha256":"03:F5:28:38:47:07:FA:B8:4D:2A:13:3A:45:A8:3C:91:46:D9:B5:6E:BD:E8:B6:C4:EB:91:CE:C7:E8:5E:5A:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us05webzoom.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://us05webzoom.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 20 Dec 2025 07:10:23 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T19:20:11.903858Z","times_seen":146652,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"us05webzoom.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}