{"report_id":"9145b9d4-c2b7-4e43-8b46-88a637056d7f","version":0,"status":"done","tags":[],"date":"2026-07-23T04:44:41Z","url":{"schema":"http","addr":"gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"title":"Google Meet","dom":{"size":15963,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (560)","md5":"86a477a0a859db09284ae9eb137c44f9","sha1":"d510e4e1e59e466890bb97a0978ce248220c8003","sha256":"0a5a34cac3fb82a5e6fb1e9c92f59ed9f43089b3417d80a4bccdf19769f546e2","sha512":"32036d6371efdc3e23164919e2af6439b50825d4e607b73c598239453cdba7f8b80035ece9b53ee04c78a8e0d05a92d4acb9c3031e4c15ae7c9235818027f91b","ssdeep":"192:0bVIAu13wNIdPlJ3TShNAQg9Joqq7BuAVzDyBFaQJGR5y4gUa1PmPmPf7CeV:0271C8jJy7EAVzDyBFa6x/hea","tlshash":"896287a696b214017416c0a07a337bab7b35c203d506cd34b7fd62a88fc7bd6a95379c","dom_hash":"domhash97c90c229ca2d9b507997ec7d48b6bf2","first_seen":"2026-07-23T04:44:46.249012Z","last_seen":"2026-07-23T04:44:46.249012Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":0,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T04:44:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"gmeetinspace.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-19T23:03:44.758639Z","alert_count":0,"request_count":1,"received_data":1770,"sent_data":574,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gmeetinspace.com","ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":27630,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34c043468b442db5a521b964143f2b0b","sha1":"18b9147c10d8b70d0dec2c2bbbe822b7aa3dbf19","sha256":"fda636f564bbfe0ef302fe1a24d95ea1b362969d457737f17b3b2b7a8580f4c8","sha512":"7199a0991e1c704e72472662f3e243bd63c984122ffe023a3978d8fdcfffa2b2afa88ff555560136b5807a89365a9ab93ad672ed849e3b9297bd7dfa1f3e6bd7","ssdeep":"","tlshash":"3551739e61f31066282f2072707f6a88a232831b3908c890b53f93d48ff0645b1676ea","size":2968,"data":"","first_seen":"2026-07-23T04:44:46.261045Z","last_seen":"2026-07-23T04:44:46.261045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T04:44:05.913Z","timestamp":1784781845913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gmeetinspace.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 04:03:21 GMT","end":"Sun, 06 Sep 2026 04:03:20 GMT"},"fingerprint":{"sha1":"4B:A7:93:FC:2B:0C:F6:6D:83:F9:FC:5F:D3:86:69:1C:D5:13:F6:8F","sha256":"F1:22:FD:0E:72:3C:02:A8:4D:8E:90:99:37:9B:5B:94:15:5A:57:D0:DB:79:08:33:A2:B8:5B:16:49:28:91:2B"}}},"request":{"raw":"GET /auth/workspace/authuser/googlemeet-invite.php HTTP/1.1\r\nHost: gmeetinspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Jul 2026 04:44:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15987,"size_decoded":4622,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (560)","md5":"7c7c489e7dede8a85a829786323813e7","sha1":"7d618bea50b80f654a087cb90249ea333b986dd2","sha256":"90aa067e1973cbcd7b818de6c72cc70a4c740cd1d4a3a56c6cb3836260c79306","sha512":"839b99dbe90b46301d2a0613dc76e74147c7a380707e67e21df18fce6c326f413b49fbb6156a5321572d51bcf5e91a4acc470aed7e0d62145e47785694a3ab55","ssdeep":"192:DbVIAu13wNIdPlJ3TShNAQg9Joqq7BuAVzDyBFaQJGR5y4gUa1PmPmPf7CeV:D271C8jJy7EAVzDyBFa6x/hea","tlshash":"3a7276a696b210017416c0a07a737bab7b35c203d506cd3477fd62a88fc7bd6a95379c","first_seen":"2026-07-23T04:44:46.252827Z","last_seen":"2026-07-23T04:44:46.252827Z","times_seen":1,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":176,"connect":158,"send":0,"wait":164,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"gmeetinspace.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gmeetinspace.com/auth/workspace/authuser/assets/logo.svg","fqdn":"gmeetinspace.com","domain":"gmeetinspace.com","tld":"com"},"ip":{"addr":"209.182.224.202","port":443,"asn":395092,"as":"SHOCK-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","date":"2026-07-23T04:44:06.847Z","timestamp":1784781846847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gmeetinspace.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 04:03:21 GMT","end":"Sun, 06 Sep 2026 04:03:20 GMT"},"fingerprint":{"sha1":"4B:A7:93:FC:2B:0C:F6:6D:83:F9:FC:5F:D3:86:69:1C:D5:13:F6:8F","sha256":"F1:22:FD:0E:72:3C:02:A8:4D:8E:90:99:37:9B:5B:94:15:5A:57:D0:DB:79:08:33:A2:B8:5B:16:49:28:91:2B"}}},"request":{"raw":"GET /auth/workspace/authuser/assets/logo.svg HTTP/1.1\r\nHost: gmeetinspace.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Feb 2026 09:34:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4192\r\ndate: Thu, 23 Jul 2026 04:44:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10876,"size_decoded":4605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b491a6ab1da736e0b2fb82b79f50b681","sha1":"d1ebe0c993aea95acd4a4b16dea274460d7f7f33","sha256":"3ba776d4e97e524a274f16edf4690b199578f33edc641360409de6256266d180","sha512":"d35ac95ac0f7466c3fac1d15c273e2a52ec8467a357764f8be18d0e044fe4cab34036376e1178aec182ccabc511382d08adc9723d11ac437904ea2d7941cc562","ssdeep":"192:xfI61yFTiMArbrNMkMtcwLoeQ5E9UCH9MIFsj1nthNim85X1IH2osg:BDCiMArJENQW9UEkj1nt6B5X1IHX","tlshash":"0b2253d87bb913f0e6c5d3c2e226942c3e2622fa6b55ce7cc36d5dd4ab4581ed4948c0","first_seen":"2024-07-10T20:20:39Z","last_seen":"2026-07-23T04:44:46.255967Z","times_seen":32,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"gmeetinspace.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/meet_2020q4_48dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gmeetinspace.com/auth/workspace/authuser/googlemeet-invite.php","date":"2026-07-23T04:44:06.945Z","timestamp":1784781846945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /images/branding/product/2x/meet_2020q4_48dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gmeetinspace.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1076\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Jul 2026 04:50:54 GMT\r\nexpires: Sun, 18 Jul 2027 04:50:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Aug 2020 22:15:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 431593\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1076,"size_decoded":1770,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8d1d7ad43a3c12e2f6e993fa9b773e55","sha1":"c938f0c4dc28d487f32b6fc3a071126cfc5dff8f","sha256":"efd52204ada06e10e310e5bc4bf417e9e5a1b0da675950832402aba69b2a84e3","sha512":"e812dfc534cda0be5a9b54a6fb074ab4ed41aeb6e8dac803d5df41ff28dea1f88d0ec117593a3d0315982866f68577f4ea2271e8d33c55f8520039a4308f570a","ssdeep":"","tlshash":"ad11d88b52517f330028bf2f8e8604146b5b0c83bd25d602a2d3772d97321d9d061f49","first_seen":"2024-12-11T23:02:17.214298Z","last_seen":"2026-07-23T04:44:46.259128Z","times_seen":8,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}