{"report_id":"57465fc6-494c-4a86-8cf0-0cdfecc9c023","version":0,"status":"done","tags":[],"date":"2026-08-15T18:49:16Z","url":{"schema":"http","addr":"zoom-us02-meeting.com/","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/invite.php","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"title":"Zoom Client Update","dom":{"size":4675,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"92dd186e6cf16b49e1220f86409bde12","sha1":"1b4259560d15b0d924fdd2f47f7cd49ee1c59069","sha256":"a3192efcca3c6532670bdd8be9fc17c4b74a7fd35962f79a53114d6d3a6fb89b","sha512":"b3bebb4d176e1c5a8fc884a552dd8f06019bcd05c49a95f7c5b80228a0dff6bf39d5778a56fbe57a19657432c888df21481816f390f296f6302440beb1498237","ssdeep":"48:nzUJD//fm2PKKeBk+p8hU4VpTqqBndx6KQTFJ0Pwx2I9ogo5Y/mLtzKqic2:nzUJ7fFhDrddx6KiJh2kGY/Q1ic2","tlshash":"2aa1329f26b300222c53b1697fea5309b5a29103d10bc9143fdd538cdfe2e89896778e","dom_hash":"domhash0a92f8546402263f055d8c3ed1133685","first_seen":"2026-08-15T18:49:21.976014Z","last_seen":"2026-08-15T18:49:21.976014Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoom-us02-meeting.com/","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:49:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chakrbbf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-08-10T18:22:17.583299Z","alert_count":0,"request_count":1,"received_data":6297,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":11854,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":2,"received_data":87938,"sent_data":1150,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chakrbbf.com","ip":{"addr":"188.209.157.196","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":15216882,"sent_data":578,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]},{"fqdn":"zoom-us02-meeting.com","ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":6,"received_data":23970,"sent_data":3259,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"4fc3a94c61e7a92d24f4966b77fc8d96","sha1":"13083c220fdc29c61245ff62d0fc8483758a7f5b","sha256":"19d986120d31758ab880ddc479601a2479d501f4f77c7418076d67c083b8af34","sha512":"e7abfa7432a4eabdc1359667531585523b8e9d1aa154703e556911ce6c6f1eab2b518419594502151d81b23187547a2f0fb18be2834b653bd7b2bcd41f2d0d23","magic":"Composite Document File V2 Document, Can't read SAT","size":15216640,"url":{"schema":"https","addr":"chakrbbf.com/Bin/ScreenConnect.ClientSetup.msi?e=Access\u0026y=Guest","fqdn":"chakrbbf.com","domain":"chakrbbf.com","tld":"com"},"ip":{"addr":"188.209.157.196","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/invite.php","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f9b0e7bf66837a25cab551bafe2102c","sha1":"1b454e1f2dc33fd3dfdd35751b4a2c3d39986005","sha256":"cfa1abf2b383f4c80af288b4feda3d5318ae2bb7e906c68e4531773a2fda85f3","sha512":"052bc11153673169e7de48ec08578a72e523db69c78aff76b36b623a95eb0606b16910e37ae36b9217fd6c373540bafcb2a30938be9e0e221d37c43ae5735478","ssdeep":"","tlshash":"4101122e367640241c86a47b7bcb134c64b36207e406d40479cd868cbfb6e5ac46279a","size":750,"data":"","first_seen":"2026-08-15T18:49:21.994568Z","last_seen":"2026-08-15T18:49:21.994568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0b888861271990e960c48d7d54e7b98","sha1":"244b4e17a91e17ae5fe073c07d897ad1846ce48e","sha256":"3e0f0c1dae2750d1413947c672304ede5f3f500cf496afab09209c5fd149ced5","sha512":"34dc79f64393c94a8b73b0bd37d895b9ce987f19c772bb3a6147c9949e594bf2548ecba91dd185c5883ff5fda2a409c60b23704ac99255e5462c1ddab971b244","ssdeep":"","tlshash":"828000ce00202300b2f208038a2b2308382220cb8c80a08000a80000b82230f023a8cb","size":26,"data":"","first_seen":"2026-08-15T18:49:21.996451Z","last_seen":"2026-08-15T18:49:21.996451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/visit.php","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:48:48.198Z","timestamp":1786819728198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-us02-meeting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 02:00:00 GMT","end":"Wed, 11 Nov 2026 02:58:33 GMT"},"fingerprint":{"sha1":"6C:B7:F4:34:CE:E6:0B:4C:89:59:FA:19:4B:F1:73:60:16:65:1A:B0","sha256":"13:51:B2:68:7B:08:66:DC:A4:99:D2:52:25:65:78:E2:15:BE:56:92:D2:46:2E:2F:E9:AE:F4:82:59:FE:B9:E2"}}},"request":{"raw":"GET /Windows/visit.php HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zoom-us02-meeting.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:48:49 GMT\r\nlocation: invite.php\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.33\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UFxzdKmv%2BgWCfk6qQbuZ4RmYQYsSU%2B67VOP2BLo7Ijg41zxtyDCjRB2oZ7%2BdIzwP162t0%2FcovikIfQBcMukUf2%2BHcZZSy5FD%2FYaq2UOED2lb97y2aTJH1RR0z%2BrGMyx9O8qb9dPji4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba60255d5f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T00:04:44.611916Z","times_seen":17909824,"resource_available":true,"data":null}},"time_used":901,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":901,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/invite.php","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:48:49.104Z","timestamp":1786819729104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-us02-meeting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 02:00:00 GMT","end":"Wed, 11 Nov 2026 02:58:33 GMT"},"fingerprint":{"sha1":"6C:B7:F4:34:CE:E6:0B:4C:89:59:FA:19:4B:F1:73:60:16:65:1A:B0","sha256":"13:51:B2:68:7B:08:66:DC:A4:99:D2:52:25:65:78:E2:15:BE:56:92:D2:46:2E:2F:E9:AE:F4:82:59:FE:B9:E2"}}},"request":{"raw":"GET /Windows/invite.php HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zoom-us02-meeting.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:48:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.2.33\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hg0HeiamPM%2Bm5lmZUPXsaUDAo7TJZ3EsQf%2BdSwbOmAOCHY0n29IVKLdXg19zKfuPbOyZGBLsVYs2pw%2BnuxBPx8eVCwZHwkbVvbP1Z%2FTBz54%2FTP6x3izNGTDYrpV03od9VMJ7WeOZxQw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba602afe674c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4687,"size_decoded":2271,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"1ac7328b3ae399a559f9502a94865ea2","sha1":"2730ba53755fd4dc4fc8fd37acae3885f93cad6e","sha256":"5cde654117a4c2cf92e1b16150f8c7ab161e92638c1698a44a527f0063e94761","sha512":"3829f47da3435e85772ba1891aedd4820504a8f20170b89fd19c833d421baab470ae8dde95a5ba1bd28a9d8c74fed0b3b62e464cf4484a649c3fe3fe407be27d","ssdeep":"48:aUJD//fm2PKKeBk+p8hU4VpTqqBndx6KQTFJ0Pwx2IBogo5Y0mLtzKqicSj:aUJ7fFhDrddx6KiJh2CGY0Q1icO","tlshash":"70a1239f26b300212c53b1657fea5309b5a29103d50bc9143fdd938cdfe6e89896778e","first_seen":"2026-08-15T18:49:21.983145Z","last_seen":"2026-08-15T18:49:21.983145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/7/7b/Zoom_Communications_Logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-us02-meeting.com/Windows/invite.php","date":"2026-08-15T18:48:49.474Z","timestamp":1786819729474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 05:24:58 GMT","end":"Thu, 10 Sep 2026 05:24:57 GMT"},"fingerprint":{"sha1":"5B:35:4A:25:C6:4D:17:23:8B:63:A3:F7:CE:52:1B:B7:22:06:BF:1B","sha256":"FE:D1:85:EF:B6:D0:7E:42:4F:F4:62:C9:8C:A3:BA:2C:88:5E:47:EB:9A:03:3D:30:4B:E3:63:FF:11:AD:F6:0D"}}},"request":{"raw":"GET /wikipedia/commons/7/7b/Zoom_Communications_Logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-us02-meeting.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 9jya8lex89ukayvxodcacvvof4wap7n\r\nlast-modified: Fri, 24 Jun 2022 04:57:39 GMT\r\ndate: Sat, 15 Aug 2026 18:48:50 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 10\r\nserver: envoy\r\netag: W/3bba4f3bded944d8c3b90293a60551bd\r\ncontent-encoding: gzip\r\nage: 0\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nx-cache: cp3077 hit, cp3077 miss\r\nx-cache-status: hit-local\r\nserver-timing: cache;desc=\"hit-local\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=PkwF3bEowQE7-7HcSKHojwO9AAAAAFvdGnrJDzrYfTJcUlrLe0i9MJAjN5a88FNl;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 15 Aug 2027 00:00:00 GMT\r\nx-request-id: 65bfdf6c-6477-425e-9f44-8ca6655b2f4d\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"PkwF3bEowQE7-7HcSKHojwO9AAAAAFvdGnrJDzrYfTJcUlrLe0i9MJAjN5a88FNl","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-08-15T00:00:00Z","raw_expires":"Sun, 15 Aug 2027 00:00:00 GMT","max_age":0,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=PkwF3bEowQE7-7HcSKHojwO9AAAAAFvdGnrJDzrYfTJcUlrLe0i9MJAjN5a88FNl;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sun, 15 Aug 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4233,"size_decoded":3835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bba4f3bded944d8c3b90293a60551bd","sha1":"51cac84301fb2ccd601c54fd491b4d9f8c293e23","sha256":"ae4dbcc7c944827cd5be49e6360c40ca2ce26e7afba8a9263e099c960180e6ae","sha512":"f7ff35416b673d5d1e0415814767fad9386c43c6ec587f66410f9acc13077be32353faad72444895c9405e130e0a21cc8cbd0e84b314a3268051d97577dbdafd","ssdeep":"96:VkoIanLX5VYfLnCwBbs5MyPRW57O5cQZzc0sXRaPAnpcCI/bV5z+ns:Vkoaxbsvw57OaQDGMW1I/jMs","tlshash":"67914364e22955edd70e871848e13d26531f34e3f0361b61f9ad88a0df022c0b6bfad6","first_seen":"2025-04-23T18:54:22.487996Z","last_seen":"2026-08-15T18:49:21.986167Z","times_seen":105,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":419,"dns":0,"connect":56,"send":0,"wait":170,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/favicon.ico","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-us02-meeting.com/Windows/invite.php","date":"2026-08-15T18:48:50.369Z","timestamp":1786819730369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-us02-meeting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 02:00:00 GMT","end":"Wed, 11 Nov 2026 02:58:33 GMT"},"fingerprint":{"sha1":"6C:B7:F4:34:CE:E6:0B:4C:89:59:FA:19:4B:F1:73:60:16:65:1A:B0","sha256":"13:51:B2:68:7B:08:66:DC:A4:99:D2:52:25:65:78:E2:15:BE:56:92:D2:46:2E:2F:E9:AE:F4:82:59:FE:B9:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-us02-meeting.com/Windows/invite.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=6,i=?0\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 15 Aug 2026 18:48:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 12 Aug 2026 14:17:53 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmagnGKC%2Binp8Bf8TpVmdkAwdOI72tTqTvpddTBr%2FNW97KIj9th9iMVd3m%2BWPMMr4zDTe%2BbVJAqS5sfuS8P2towNCa1jfTda0Em6l8Vi64ElME15bpHQZV5HcoQ1zJsCW3MAm%2BahbKc%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"3c2e-658da40c48640\"\r\ncf-ray: a2ba6032ef6c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":4255,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e1e13f766528922b09334b5d95a0fa95","sha1":"d77ac4f9485e79e930883011f7173a1ad4ef7c95","sha256":"2e86860f191abefe46a60d5cb42f6a3421f0820a839042ad8e7a76240338e510","sha512":"6c43efcb42520af21766b865265fa1b7b1cf116f196731a5d8e44e3743a9b5cc0767e6bb476e6520932fb830c07f81ae8a902b68861e3748c418185f63d4f951","ssdeep":"192:wYL+d+tEayprrMCkAk+99pgl0V9S1gjt8:7zG/MCkAkE9pg2VWc","tlshash":"a86245fe3bc7880fc81c8a729437176d83d6ed8872951357a059e0a8adaf59f4dd20d2","first_seen":"2025-04-23T18:54:22.488943Z","last_seen":"2026-08-15T18:49:21.987439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":271,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/download.php","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:49:00.067Z","timestamp":1786819740067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-us02-meeting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 02:00:00 GMT","end":"Wed, 11 Nov 2026 02:58:33 GMT"},"fingerprint":{"sha1":"6C:B7:F4:34:CE:E6:0B:4C:89:59:FA:19:4B:F1:73:60:16:65:1A:B0","sha256":"13:51:B2:68:7B:08:66:DC:A4:99:D2:52:25:65:78:E2:15:BE:56:92:D2:46:2E:2F:E9:AE:F4:82:59:FE:B9:E2"}}},"request":{"raw":"GET /Windows/download.php HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-us02-meeting.com/Windows/invite.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:49:00 GMT\r\nlocation: https://chakrbbf.com/Bin/ScreenConnect.ClientSetup.msi?e=Access\u0026y=Guest\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.33\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BzBOQgNCUXQY50gnQgrpl2HTox%2Fjx7bwRifZjh0T77zG35GcP6qcvC5LiXBSXVU4KnsJE70o%2BOUApiG0MwBHi4Ko51U4xcSXyYKYzwIAkV1Uy%2FnNBC9AUvCsH5e1mlYIPNfOLH3DgU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba606f6c624c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-msi","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T00:04:44.611916Z","times_seen":17909824,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/Windows/","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:48:47.980Z","timestamp":1786819727980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-us02-meeting.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 02:00:00 GMT","end":"Wed, 11 Nov 2026 02:58:33 GMT"},"fingerprint":{"sha1":"6C:B7:F4:34:CE:E6:0B:4C:89:59:FA:19:4B:F1:73:60:16:65:1A:B0","sha256":"13:51:B2:68:7B:08:66:DC:A4:99:D2:52:25:65:78:E2:15:BE:56:92:D2:46:2E:2F:E9:AE:F4:82:59:FE:B9:E2"}}},"request":{"raw":"GET /Windows/ HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-us02-meeting.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:48:48 GMT\r\nlocation: visit.php\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.33\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB%2B5CVs8wetlxoWegcc52xcyUQ7gIYpy4qEA5s9kOpCKs0QUEpsT%2FSaP1HULOnJd3ZySYWwEdVPbkSvjLkNUScamt%2FeFQUiVpmJJ0YbPt%2FCzhsoyO63tgrodGmfzmwfbx%2B6XF5IVj2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6023fd314c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T00:04:44.611916Z","times_seen":17909824,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-us02-meeting.com/Windows/invite.php","date":"2026-08-15T18:48:49.471Z","timestamp":1786819729471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-us02-meeting.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 18:48:49 GMT\r\ndate: Sat, 15 Aug 2026 18:48:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11170,"size_decoded":2283,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ab7aef9e97f1f682bf9e23fcda8d158b","sha1":"064837959a405b0b17269c8bf9ca65cc5aeeb072","sha256":"6b90c3537b956ecadd99a855e71052bae9ef34533331f78df413ce33daa0ca82","sha512":"dad2d8721842b3291d7787fde2ed4eb04838b342ff3a27eb0247fde7a36df4bbb2fc9f5a2c0c86f9d40ba4b65d2c7ab8180ecf63a4a2270ec7d516159069a81b","ssdeep":"192:2N9fmN9fN94N9fkN9/qbN9DbqGIwV4BN9nN9uwN9kN9fNN9gN9XN9fTN9/qsN9DQ:89fM919W969yh9/qY4X9N9t9i9fD9O9s","tlshash":"4d321fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T01:10:36.087289Z","last_seen":"2026-08-15T18:49:21.990346Z","times_seen":3729,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":35,"connect":47,"send":0,"wait":274,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-us02-meeting.com/Windows/invite.php","date":"2026-08-15T18:48:49.941Z","timestamp":1786819729941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-us02-meeting.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-16T00:03:58.763895Z","times_seen":263306,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":39,"connect":0,"send":0,"wait":158,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-us02-meeting.com/Windows/invite.php","date":"2026-08-15T18:48:49.942Z","timestamp":1786819729942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://zoom-us02-meeting.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 13 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203472\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-16T00:03:58.763895Z","times_seen":263306,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":0,"dns":38,"connect":52,"send":0,"wait":55,"receive":103,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chakrbbf.com/Bin/ScreenConnect.ClientSetup.msi?e=Access\u0026y=Guest","fqdn":"chakrbbf.com","domain":"chakrbbf.com","tld":"com"},"ip":{"addr":"188.209.157.196","port":443,"asn":0,"as":"","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:49:00.745Z","timestamp":1786819740745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chakrbbf.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 08:44:10 GMT","end":"Thu, 05 Nov 2026 08:44:09 GMT"},"fingerprint":{"sha1":"9B:50:82:3D:9E:4A:7D:13:BF:92:48:6F:8B:FD:AC:C3:D7:43:E3:3B","sha256":"63:34:90:CE:DB:EE:A5:60:83:68:2E:AE:72:A4:E9:C5:1E:D5:B4:CD:64:62:F1:DD:2D:97:62:F2:F1:15:6A:C6"}}},"request":{"raw":"GET /Bin/ScreenConnect.ClientSetup.msi?e=Access\u0026y=Guest HTTP/1.1\r\nHost: chakrbbf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zoom-us02-meeting.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\ncontent-length: 15216640\r\ncontent-type: application/x-msi\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sat, 15 Aug 2026 18:49:01 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":15216640,"size_decoded":242,"mime_type":"application/x-msi","magic":"Composite Document File V2 Document, Can't read SAT","md5":"4fc3a94c61e7a92d24f4966b77fc8d96","sha1":"13083c220fdc29c61245ff62d0fc8483758a7f5b","sha256":"19d986120d31758ab880ddc479601a2479d501f4f77c7418076d67c083b8af34","sha512":"e7abfa7432a4eabdc1359667531585523b8e9d1aa154703e556911ce6c6f1eab2b518419594502151d81b23187547a2f0fb18be2834b653bd7b2bcd41f2d0d23","ssdeep":"24576:CA+VkEcCGeCSgxgu3nMoFTsAVOm+E9tmVL+7qH2h:Cx3cCP5gSu3MoBTV0E9tmVL+uHe","tlshash":"4f25230de554e343f13b91374d26a6c5e887bc334e91eaca190db38512f0fe36b59a4a","first_seen":"2026-08-15T18:49:21.992275Z","last_seen":"2026-08-15T18:49:21.992275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2603,"timings":{"blocked":-1,"dns":15,"connect":98,"send":0,"wait":295,"receive":1704,"ssl":491},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chakrbbf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-us02-meeting.com/","fqdn":"zoom-us02-meeting.com","domain":"zoom-us02-meeting.com","tld":"com"},"ip":{"addr":"172.67.170.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:48:46.649Z","timestamp":1786819726649,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: zoom-us02-meeting.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 15 Aug 2026 18:48:47 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.33\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qswagIsqPCqoft0IgVT5fiEJ1YArFBFlo4c3BRXToIRdUEe%2ByohfAd6IOQyrPUnvNSYcRvF2ff00h0D8sWWJ66RxfI5F28gX6ZeWXPqpIziEcKwKKrYNjdzhA4b67zKpNZw2FxT47GM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba601c4bc04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T00:04:44.611916Z","times_seen":17909824,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"zoom-us02-meeting.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}