{"report_id":"3e049319-1f70-47b9-94d6-f54671eebb9d","version":0,"status":"done","tags":[],"date":"2026-09-01T19:36:26Z","url":{"schema":"http","addr":"000zoom-invite-us.us/","fqdn":"000zoom-invite-us.us","domain":"000zoom-invite-us.us","tld":"us"},"ip":{"addr":"207.246.78.75","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nithcomunicacao.com/zoom/Zoom%20Client%20Update.html","fqdn":"nithcomunicacao.com","domain":"nithcomunicacao.com","tld":"com"},"title":"Zoom Client Update","dom":{"size":10969,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2328)","md5":"6b65f35f37050a0bab9ff8cd3f146407","sha1":"ac4c80a137dea3d0d1a4218df4aa4f460cc18727","sha256":"040b23d7b9ff5a740cbff96b93f0b0d5a5aedd5cc06a9f61ae49d87d63551b98","sha512":"d377f1d7460187715f9530d25190bcbef830a4365e5f3df1f15680cf8c067b9c4aacc4f58702cf521263a7468198cee23a9f47849216d1d18a44cfb595a20868","ssdeep":"192:Q+UqR0VzgFkQJfAC/ICoW49DKOKUHXV+i0efroRpJIcew5KbbWqbQj:aVMFoJ/W4FPKUkjfLaWuy","tlshash":"7a32fa2a92b2002939267189fdb0ff1a7a669253d60147f0b4ee14a9dfcd77218773dc","dom_hash":"domhash36e079a315dcdcbfe499b4ae81cd5f05","first_seen":"2026-09-01T19:36:32.81781Z","last_seen":"2026-09-01T19:36:32.81781Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"000zoom-invite-us.us/","fqdn":"000zoom-invite-us.us","domain":"000zoom-invite-us.us","tld":"us"},"ip":{"addr":"207.246.78.75","port":0,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-06T19:36:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nithcomunicacao.com","ip":{"addr":"200.98.245.120","port":443,"asn":7162,"as":"Universo Online S.A.","country":"Brazil","country_code":"BR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-01T19:36:26.914327Z","last_seen":"2026-09-01T19:36:26.914327Z","alert_count":0,"request_count":2,"received_data":16898,"sent_data":1066,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"000zoom-invite-us.us","ip":{"addr":"207.246.78.75","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-01T19:36:26.929169Z","last_seen":"2026-09-01T19:36:26.929169Z","alert_count":0,"request_count":1,"received_data":226,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.000zoom-invite-us.us","ip":{"addr":"207.246.78.75","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-01T19:36:26.913092Z","last_seen":"2026-09-01T19:36:26.913092Z","alert_count":0,"request_count":1,"received_data":253,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nithcomunicacao.com/zoom/Zoom%20Client%20Update.html","fqdn":"nithcomunicacao.com","domain":"nithcomunicacao.com","tld":"com"},"ip":{"addr":"200.98.245.120","port":443,"asn":7162,"as":"Universo Online S.A.","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-09-01T19:44:12.096121Z","times_seen":5154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nithcomunicacao.com/favicon.ico","fqdn":"nithcomunicacao.com","domain":"nithcomunicacao.com","tld":"com"},"ip":{"addr":"200.98.245.120","port":443,"asn":7162,"as":"Universo Online S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nithcomunicacao.com/zoom/Zoom%20Client%20Update.html","date":"2026-09-01T19:35:53.607Z","timestamp":1788291353607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.nithcomunicacao.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 10:27:41 GMT","end":"Mon, 30 Nov 2026 10:27:40 GMT"},"fingerprint":{"sha1":"12:C9:8F:B2:D8:68:FF:ED:23:86:F7:29:91:A4:FA:B0:B6:1D:E8:D9","sha256":"C7:21:34:A4:65:F0:40:04:4F:03:64:81:FC:6A:17:A9:EA:15:9B:05:D2:D0:9C:17:AC:34:2D:9B:77:0C:7E:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nithcomunicacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nithcomunicacao.com/zoom/Zoom%20Client%20Update.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 01 Sep 2026 19:35:53 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 Apr 2016 19:34:08 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 5430\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/x-icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5430,"size_decoded":5675,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"5af5e247a0d4ef584d7cce451847885d","sha1":"91c585fba77e98c2fea9d90d953d49e8c7df7e62","sha256":"32a5997e582a5e0a59b9eec1938cdb6b3bca1011d92c02e84ac924777c47446a","sha512":"c774179e1db6cfd7517a7bd8d1332bc180e38baa4082f4d8f4423a6a981f4db554e3c0c608f5eaa7da0141e498e199d688f7f9434c0203da3d3cc7898aac05b8","ssdeep":"24:NLrGynXpsxNJGSpAAYamA38oiOjz1ibpSkPFeAeZdTSxE/EMrgCjr5Y5V5UAHxyo:Jv5sdneCmEZijdj0TaeEMXr653UQABz","tlshash":"51b1f6ca1ebc4163cf11bff2f65c651e467a903c80e4721cba81b4ab6e1503a24ed1bc","first_seen":"2023-04-19T11:00:39Z","last_seen":"2026-09-01T19:36:32.819366Z","times_seen":308,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"000zoom-invite-us.us/","fqdn":"000zoom-invite-us.us","domain":"000zoom-invite-us.us","tld":"us"},"ip":{"addr":"207.246.78.75","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T19:35:48.886Z","timestamp":1788291348886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"000zoom-invite-us.us","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 15:55:24 GMT","end":"Sun, 29 Nov 2026 15:55:23 GMT"},"fingerprint":{"sha1":"C4:02:DF:7D:FB:E4:8C:0D:00:24:BB:57:C8:BE:A3:EB:5A:66:05:D8","sha256":"B9:4B:1D:71:6F:D0:67:33:80:DA:A9:D4:28:5C:5B:5B:51:45:F5:AA:8D:BF:9E:55:A6:1E:AD:4D:E5:FC:55:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 000zoom-invite-us.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Tue, 01 Sep 2026 19:35:49 GMT\r\nlocation: https://www.000zoom-invite-us.us/\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-01T23:33:01.172976Z","times_seen":18225007,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":73,"connect":124,"send":0,"wait":249,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.000zoom-invite-us.us/","fqdn":"www.000zoom-invite-us.us","domain":"000zoom-invite-us.us","tld":"us"},"ip":{"addr":"207.246.78.75","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T19:35:49.599Z","timestamp":1788291349599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.000zoom-invite-us.us","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 15:55:24 GMT","end":"Sun, 29 Nov 2026 15:55:23 GMT"},"fingerprint":{"sha1":"8B:20:1D:93:23:58:19:C5:A2:59:4F:07:D7:96:15:DF:2D:B7:86:F4","sha256":"51:6C:F5:67:34:F3:B7:E7:32:3B:52:C4:F8:2A:CA:C7:D2:61:B3:5B:B2:F7:D2:FE:FA:C8:1C:12:1C:AA:A4:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.000zoom-invite-us.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Tue, 01 Sep 2026 19:35:50 GMT\r\nlocation: https://nithcomunicacao.com/zoom/Zoom%20Client%20Update.html\r\nserver: nginx\r\nvia: 1.1 Caddy\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-01T23:33:01.172976Z","times_seen":18225007,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":76,"connect":127,"send":0,"wait":260,"receive":1,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nithcomunicacao.com/zoom/Zoom%20Client%20Update.html","fqdn":"nithcomunicacao.com","domain":"nithcomunicacao.com","tld":"com"},"ip":{"addr":"200.98.245.120","port":443,"asn":7162,"as":"Universo Online S.A.","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T19:35:50.216Z","timestamp":1788291350216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.nithcomunicacao.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 10:27:41 GMT","end":"Mon, 30 Nov 2026 10:27:40 GMT"},"fingerprint":{"sha1":"12:C9:8F:B2:D8:68:FF:ED:23:86:F7:29:91:A4:FA:B0:B6:1D:E8:D9","sha256":"C7:21:34:A4:65:F0:40:04:4F:03:64:81:FC:6A:17:A9:EA:15:9B:05:D2:D0:9C:17:AC:34:2D:9B:77:0C:7E:19"}}},"request":{"raw":"GET /zoom/Zoom%20Client%20Update.html HTTP/1.1\r\nHost: nithcomunicacao.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 01 Sep 2026 19:35:53 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 31 Aug 2026 16:33:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 10979\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10979,"size_decoded":11223,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2328)","md5":"71aafc539cc69fde871d7e78ae18f76c","sha1":"4fcb5f92218c22c175d75469ff46ed122a5a4100","sha256":"6cb9382d9fc23bc6250e1f81c6069120c267b7d9ea6cb70a13a31714a02fba38","sha512":"1ed0092d3df65ef15bd0ce39c9cef12da8a4217b98682257a770a6712b682b5bd4ac831dad85f7e2d709a2df8886d2c0b0db78ec4d36f72fe47003607f0d4858","ssdeep":"192:M+UqR0VzgFkQJfAC/ICoW49DKOKUHXV+i0e0roRpJNcew5KbbWqbQj:eVMFoJ/W4FPKUk+CLaWuy","tlshash":"4432fa2a92b2002939267189fdb0ff1a7a669253d60147f0b4ee14a9dfcd77218773dc","first_seen":"2026-09-01T19:36:32.820573Z","last_seen":"2026-09-01T19:36:32.820573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3142,"timings":{"blocked":-1,"dns":2047,"connect":218,"send":0,"wait":433,"receive":3,"ssl":441},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}