{"report_id":"3dd00861-c705-4f5f-8947-2d2487469e85","version":0,"status":"done","tags":[],"date":"2026-06-07T17:40:43Z","url":{"schema":"http","addr":"zoom-h.com.cn/","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.52","port":0,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"zoom-h.com.cn/","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"title":"ZOOM - 官方在线会议工具｜官方下载","dom":{"size":2764,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f2a0a92c2b5853254c1f1e095dea3e14","sha1":"ab9ace56a3967d6ae15f393338a4fc5fca8ec735","sha256":"08b5fc5c3101c73c664c6336182e7b642a06eacb458d8600234a7b3700f8533b","sha512":"7b3206e872d44e1b40b416151d5f5898387d647825eaf9ab9dc9d779e77cfad761cbab49d17a28e3351a557e9de6aad7d3b3f796f4cf6f1fd433f0c9f19134fe","ssdeep":"","tlshash":"3151a73a54f1b82f50d2e2d12ba4866f1fd4eb53d85b461071ec1a948fd3ec2cc5b12a","dom_hash":"domhash2dae39e7939f86c21deb835e1df8c9ee","first_seen":"2026-06-07T17:40:46.007689Z","last_seen":"2026-06-07T17:40:46.007689Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoom-h.com.cn/","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.52","port":0,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T17:40:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zoom-h.com.cn","ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-06-07T17:40:43.100957Z","last_seen":"2026-06-07T17:40:43.100957Z","alert_count":8,"request_count":4,"received_data":7682,"sent_data":1858,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-06-02T11:40:35.64368Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoom-h.com.cn/js/main.js","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad4d2f5cbc03e5dab4979814b0e9eeb9","sha1":"1a4a6672f5dd2c3c7af61aa8a0b4d8b7992e808a","sha256":"bbaaf9f60f268371df3941b8ca7bcdfc26a2c2c2f33169f36b6fa6a6bab0fab0","sha512":"982e1c8316033620c1627f20723c5a2436238511bfd0c1b4cbd178dba9766a4f7a7440b49ff6ffac96dfa6659716f8a0c48f1e9642da52d14a701bd3ea8fb189","ssdeep":"","tlshash":"44b09278ae3e54b05262f230222ba609293b59125040941a3508966e5ed7a8808728de","size":118,"data":"","first_seen":"2026-05-18T11:51:07.62416Z","last_seen":"2026-07-14T15:02:32.996326Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoom-h.com.cn/css/style.css","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-h.com.cn/","date":"2026-06-07T17:40:12.310Z","timestamp":1780854012310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-h.com.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 10:08:28 GMT","end":"Thu, 13 Aug 2026 10:08:27 GMT"},"fingerprint":{"sha1":"FD:89:6B:C0:9D:B4:C8:34:08:75:C6:D6:67:D2:BD:73:B4:95:96:53","sha256":"A5:4E:F7:3D:BE:64:FB:99:FA:62:F7:65:6E:11:C8:23:12:D4:0F:8F:E6:12:81:66:06:5E:60:83:5B:F9:3B:20"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: zoom-h.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-h.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 17:40:12 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 15 May 2026 14:37:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a072fbb-a56\"\r\nexpires: Mon, 08 Jun 2026 05:40:12 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nserver: jiduncdn\r\nx-cache-status: EXPIRED from L1:126\r\nvia: L1:126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2646,"size_decoded":1279,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2708), with no line terminators","md5":"d1503e501e76c75693367f810c658af0","sha1":"d43188dc497e7eec6540c271c79e6bae2a7f7a16","sha256":"0a9c0b58d5d1bed9730d91ed486b46fc67656f2fb55555422e17fc7c768324a3","sha512":"a3aad3551bad0e739e31762ac54dc13076ba516b0c70adf285ed2ec6346146eaf85e2f2b9ca285153f2696b93fc6b967ff847d7ac0600f2ffeac9d2ed09427fb","ssdeep":"","tlshash":"0e51de0b73103106bb0ba8503de3c759a32dd953a1478cfe9aa6446df29d1dc4269a2f","first_seen":"2026-06-07T17:40:46.008859Z","last_seen":"2026-06-07T17:40:46.008859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-h.com.cn/js/main.js","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-h.com.cn/","date":"2026-06-07T17:40:12.311Z","timestamp":1780854012311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-h.com.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 10:08:28 GMT","end":"Thu, 13 Aug 2026 10:08:27 GMT"},"fingerprint":{"sha1":"FD:89:6B:C0:9D:B4:C8:34:08:75:C6:D6:67:D2:BD:73:B4:95:96:53","sha256":"A5:4E:F7:3D:BE:64:FB:99:FA:62:F7:65:6E:11:C8:23:12:D4:0F:8F:E6:12:81:66:06:5E:60:83:5B:F9:3B:20"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: zoom-h.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-h.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 17:40:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 118\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 15 May 2026 14:37:47 GMT\r\netag: \"6a072fbb-76\"\r\nexpires: Mon, 08 Jun 2026 05:40:12 GMT\r\ncache-control: max-age=43200\r\nserver: jiduncdn\r\nx-cache-status: EXPIRED from L1:126\r\nvia: L1:126\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118,"size_decoded":521,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with no line terminators","md5":"fd4d5d999fd85e2133514fae9ef58aca","sha1":"cda679a22f9a5da9b1f4ed9ae3a5341309844fab","sha256":"534d6573b3a5a45f36c991e6f4106140594943e511da219b6e221d9b865a1f5a","sha512":"3993bf85da54fc7561e2538138a2b537f8a71ae2569185d7822bb02ea45872036db3c6e37d0509f249909129aec8c1dcc2313c07b5ca93d3c7b9c59c7b147269","ssdeep":"","tlshash":"81b092b96e7e74f05aa2f824229bb645193b68035000a51b2e089a9aced6a4c48724de","first_seen":"2026-06-07T17:40:46.01Z","last_seen":"2026-06-07T17:40:46.01Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-h.com.cn/","date":"2026-06-07T17:40:12.496Z","timestamp":1780854012496,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-h.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T17:57:29.880101Z","times_seen":17840789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-h.com.cn/favicon.ico","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-h.com.cn/","date":"2026-06-07T17:40:13.738Z","timestamp":1780854013738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-h.com.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 10:08:28 GMT","end":"Thu, 13 Aug 2026 10:08:27 GMT"},"fingerprint":{"sha1":"FD:89:6B:C0:9D:B4:C8:34:08:75:C6:D6:67:D2:BD:73:B4:95:96:53","sha256":"A5:4E:F7:3D:BE:64:FB:99:FA:62:F7:65:6E:11:C8:23:12:D4:0F:8F:E6:12:81:66:06:5E:60:83:5B:F9:3B:20"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoom-h.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-h.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 07 Jun 2026 17:40:13 GMT\r\ncontent-type: text/html\r\ncontent-length: 730\r\nstrict-transport-security: max-age=31536000\r\netag: \"6a072fbb-2da\"\r\nserver: jiduncdn\r\nx-cache-status: MISS from L1:126\r\nvia: L1:126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":730,"size_decoded":980,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (735), with no line terminators","md5":"a92a630ae5e68a25d5ce0a40ab820101","sha1":"151be42514ae05c774d6f83c5cafa4b139c8a680","sha256":"e95ba1cd2d7abc2918680d10a49089edad83a87b6b50cdac74c6eb0ce58c8f29","sha512":"4d5d68e88607b383b7ef0ca2a3d5256b8edfa69fc4484174fbaf5f07cab9370f58c9c8ad75237e925968ee8714dc36bf7b6f5b09b9bf4948c6a30d850ebe896d","ssdeep":"","tlshash":"8801446e1d41f1394500cbe705b4eb0e2d98f4445e73cd08b5dd826adb86b408c77c70","first_seen":"2026-06-07T17:40:46.011689Z","last_seen":"2026-06-07T17:40:46.011689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-h.com.cn/","fqdn":"zoom-h.com.cn","domain":"zoom-h.com.cn","tld":"com.cn"},"ip":{"addr":"137.59.18.51","port":443,"asn":138195,"as":"MOACK.Co.LTD","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T17:40:11.009Z","timestamp":1780854011009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-h.com.cn","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 10:08:28 GMT","end":"Thu, 13 Aug 2026 10:08:27 GMT"},"fingerprint":{"sha1":"FD:89:6B:C0:9D:B4:C8:34:08:75:C6:D6:67:D2:BD:73:B4:95:96:53","sha256":"A5:4E:F7:3D:BE:64:FB:99:FA:62:F7:65:6E:11:C8:23:12:D4:0F:8F:E6:12:81:66:06:5E:60:83:5B:F9:3B:20"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoom-h.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 17:40:12 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 15 May 2026 14:40:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a07304e-b2e\"\r\ncontent-encoding: gzip\r\nserver: jiduncdn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2862,"size_decoded":1430,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2490), with no line terminators","md5":"3720b8ddf2cf78cc99d72c8321cdd543","sha1":"b2e583a5d6606238b4ee5a4d1ff9e4595ec423a2","sha256":"ac949b8da199fd2c965f757bc70d0ea42b6c8e9a983b0857e355cad3e9d5985c","sha512":"63ea17a1a6f459a278ecf0b3dad97801b8c58cd36dd1702b69b6b85f9f8c1f784d57652b564bbc7b519b351942d44f1502aa77a85e3c39c49de9d687aa850ce7","ssdeep":"","tlshash":"1e510e3f68d4b53b1087ead10bb45a3e2e9cf3518c7b4a5231ec5ae48bc3a80cc5b250","first_seen":"2026-06-07T17:40:46.012755Z","last_seen":"2026-06-07T17:40:46.012755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":352,"connect":186,"send":0,"wait":189,"receive":0,"ssl":382},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"zoom-h.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}