{"report_id":"7922018e-fc52-4b42-91c1-1fe006a603a0","version":0,"status":"done","tags":[],"date":"2026-07-18T17:28:03Z","url":{"schema":"http","addr":"us31web-zoom.com","fqdn":"us31web-zoom.com","domain":"us31web-zoom.com","tld":"com"},"ip":{"addr":"144.91.114.70","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"us31web-zoom.com/","fqdn":"us31web-zoom.com","domain":"us31web-zoom.com","tld":"com"},"title":"Access Denied","dom":{"size":668,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"51d364cfa6cc7b284d09e6b101082056","sha1":"1954cb856f8a6840fd589f06672070c1941fb18f","sha256":"050b4b88413594f2447cc1204c5e2b330cf4b69fbcefe0cf5bf4955fdf3c9e3b","sha512":"7f46f89f6b1829883c8b87fdbf6900240e67ba83612f80f827d7de768b714048326dbf3e3f8ac3861e2d21f45b0d1f9a76c98ce2e0a7bb80bee9790880260cfd","ssdeep":"","tlshash":"82012006e1530183b01386617fb5b780ab118043438ddb713c5e319c8f41744ca87614","dom_hash":"domhashd03f692d9eac3c2182f61f17fb5ccc1d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us31web-zoom.com","fqdn":"us31web-zoom.com","domain":"us31web-zoom.com","tld":"com"},"ip":{"addr":"144.91.114.70","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:28:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"us31web-zoom.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"us31web-zoom.com","ip":{"addr":"144.91.114.70","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-07-18T17:28:03.385106Z","last_seen":"2026-07-18T17:28:03.385106Z","alert_count":2,"request_count":2,"received_data":2962,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us31web-zoom.com/","fqdn":"us31web-zoom.com","domain":"us31web-zoom.com","tld":"com"},"ip":{"addr":"144.91.114.70","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:27:36.587Z","timestamp":1784395656587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us31web-zoom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 01:49:22 GMT","end":"Sun, 27 Sep 2026 01:49:21 GMT"},"fingerprint":{"sha1":"22:B3:B1:0B:5C:31:F6:F6:6C:3B:23:F8:75:24:42:D8:45:A8:4A:43","sha256":"40:4F:78:CA:3C:9C:49:EE:A5:09:43:7F:30:9B:28:7D:F7:A9:E7:18:05:8E:1D:30:D8:33:86:6C:FE:22:B0:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us31web-zoom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=bbdoaf6dhp7i555lar7hq1o0gn; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 366\r\ndate: Sat, 18 Jul 2026 17:27:36 GMT\r\nserver: LiteSpeed\r\nx-powered-by: CyberPanel-OLS/2.5.0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":712,"size_decoded":947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"46291f2b9ef235c257bc2eb0f3d0980b","sha1":"46d9ea1344c494560c0c5a52f1cd7395d10aa539","sha256":"27347d2ca81017f6cb85d7bfa77880899b5efea6924d6594c58a9f63ff0c5575","sha512":"b755a5a110c90b208610f828182d7f4fb8e38056936c5d1a769fcae7bc87d76abd8f830d5b51ab63523ee25078c1cfd386a1586b27267fb9a39a1dee0a41203b","ssdeep":"","tlshash":"9901eb1ae1c01647107346a2bfa2b380df528083038a4fb53cee725b1f725048b97b40","first_seen":"2025-04-14T12:16:50.293731Z","last_seen":"2026-07-18T17:32:33.926676Z","times_seen":67,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":5,"connect":24,"send":0,"wait":232,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"us31web-zoom.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us31web-zoom.com/favicon.ico","fqdn":"us31web-zoom.com","domain":"us31web-zoom.com","tld":"com"},"ip":{"addr":"144.91.114.70","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us31web-zoom.com/","date":"2026-07-18T17:27:37.389Z","timestamp":1784395657389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us31web-zoom.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 01:49:22 GMT","end":"Sun, 27 Sep 2026 01:49:21 GMT"},"fingerprint":{"sha1":"22:B3:B1:0B:5C:31:F6:F6:6C:3B:23:F8:75:24:42:D8:45:A8:4A:43","sha256":"40:4F:78:CA:3C:9C:49:EE:A5:09:43:7F:30:9B:28:7D:F7:A9:E7:18:05:8E:1D:30:D8:33:86:6C:FE:22:B0:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us31web-zoom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us31web-zoom.com/\r\nCookie: PHPSESSID=bbdoaf6dhp7i555lar7hq1o0gn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html\r\ncache-control: private, no-cache, max-age=0\r\npragma: no-cache\r\ndate: Sat, 18 Jul 2026 17:27:37 GMT\r\nserver: LiteSpeed\r\nx-powered-by: CyberPanel-OLS/2.5.0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1249,"size_decoded":1131,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"f58515dfe987f7e027c8a71bbc884621","sha1":"bec6aebf5940ea88fbbff5748d539453d49fa284","sha256":"679e7e62b81267c93d0778083ae0fd0efe24172ff0ac581835b54165b3d9ed43","sha512":"f085346a38318f7935d76909db0367862924cc9b0d96256f7ff4e8999c041e610bbcde8ca56c92673bde0991c85e9c9d9b6726abd91d0c3177462c80d4a99140","ssdeep":"","tlshash":"8b21653ec1c1520ae0271164fb81f3a86629821191970f703b8eb176f6cd0bb52a36c8","first_seen":"2024-02-10T12:39:22Z","last_seen":"2026-07-19T03:30:57.828335Z","times_seen":42544,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"us31web-zoom.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}