{"report_id":"a892931a-badb-4b0d-aca4-76d6d3cb2780","version":6,"status":"done","tags":[],"date":"2026-02-08T15:12:29Z","url":{"schema":"http","addr":"zoom-premium.click","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"zoom-premium.click/","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"title":"ZOOM PREMIUM","dom":{"size":60936,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"8ef4e40d8d3d4276357b36394303e496","sha1":"79f9bc4eb056dff175a7b248c08e0a72fc65701f","sha256":"d40090009759da29a6c35d05a1964bb1f072c125467b09040fb55a067a4f3241","sha512":"5d60cea57b3ef31a7fd4ccf297bdef3717f4920011998d0c1992e4ec366e0402a509aaa963bcc097fa21deb1da21a976a819b9a32e1af757d14b9ae5d82946d0","ssdeep":"1536:W3ypIxgeF4srnrP/WPHXWuE04dveFyaVdxO73SCXUU:tIgeF4srnrXWPHXWYoeFpVdxc3SCX/","tlshash":"31532872915c1a7b0a1b4bf9d1d8bb15625ad722ce014b4afafdc25403c9ee52263b3c","dom_hash":"domhashb5c33be092083083e0a94bbb442e7f8b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoom-premium.click","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T15:12:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zoom-premium.click","ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-08T14:29:05.287392Z","last_seen":"2026-02-08T14:29:05.287392Z","alert_count":26,"request_count":26,"received_data":1271234,"sent_data":13109,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PressMaximum Customify:0.4.13","description":"PressMaximum Customify is lightweight, responsive and flexible multipurpose WordPress theme.","website":"https://pressmaximum.com/customify","common_platform_enumeration":"","icon":"PressMaximum.png","categories":["WordPress themes"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa64af3761af4d692bc69a2f676a28e3","sha1":"07b35ef1d3551db7b44c034ae4a1d22878b5675c","sha256":"6a771e69902d8e674992bb366177ec9ea7a697da9e65107c92473a672ad82415","sha512":"c98b6f6b04a4d2e5d67d9f457848e35c9de4264d9a3451a266778c6802fd7808e1394ee3fa57f5a27ec7a96529b5ee3de7d810177bb3497975937592e902230d","ssdeep":"768:ycWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47ZD4:yg0d3ioFpg5SUBQyQEny+PaKyCd4","tlshash":"50b2a78976d670065e9720f4909ba60b61b66961e008e83c75b8e4d1bef8fcc50f7f78","size":25094,"data":"","first_seen":"2024-06-29T13:37:30Z","last_seen":"2026-06-06T19:50:35.222873Z","times_seen":2915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/wp-emoji-loader.min.js","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"328de5ebff058b9841993f30b62394f2","sha1":"4fc0980e18f5966d5ee6876837600bb4b078a306","sha256":"44f52b7343dcc273843c06fa732dd8d96131e0de99914e0299cb17949329b705","sha512":"2c54dbf9299e479c0e416e484f49348b46e7a443029f7160a339f32f000fe17ccb65d0542ca6ad5b0edca1e6dd7616c24e842ef2b8207fc40ca9b77a76c27213","ssdeep":"","tlshash":"db618696e77a38dbb2f900f2697a0d47eb614435d6c8d438c9aea3141cb5893c374b46","size":3257,"data":"","first_seen":"2026-02-08T14:29:08.966533Z","last_seen":"2026-02-08T15:12:30.01566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/themes/customify/assets/js/theme.min.js?ver=0.4.13","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"c421c3766dd64263b6052d67db077f02","sha1":"60b1c42fc1294c5b35b6b6b3430e9c96b36ee7ca","sha256":"d7e4ee734117e1b8f68680c65fc4293945f815df5250d0b758915f4c40a80a38","sha512":"f1c05c30897377fb33ed0e3ce00a80e9d89f9cfd1e0b1fd1f68ec99501614fd4566043b05b95b031a53050e413e80b724b48039aae402ad188ae1520e0d03286","ssdeep":"192:aDZ2soiS6tSxYEGKsK6j9sy3G8S4v4/OOaL1zrA4b4GrrzZ/e4kRORdb2fBKoyGf:a5usKiSy3nw/OJPGEoyxpJNqF","tlshash":"9852a6d5ba14247700df5ae662eaaa8c373364dded018050347cdcea19b4dc662a2ffd","size":13932,"data":"","first_seen":"2024-10-12T13:59:09.992736Z","last_seen":"2026-06-06T16:56:32.416784Z","times_seen":428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/js/library/intlTelInput.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c663822727a5c2785a10ac97f102b80","sha1":"abb1c43edac9e7175ea3baec6a4068c66b1c7238","sha256":"60841d7c0aa703762f43a02c69547e9f97ee104c5b3e5c1289c476e3fdfd2ade","sha512":"3b0cf8cee38ad56c2b976437745c7596890b3571fb4108afb48c8b4b78a9a0bc71f3d18533db57330fcac8e782a6c60592f19a553a47ee973efb496da53402e9","ssdeep":"768:X5l03XVqC/iPIgVXpwJxCqnU7qaMNjUA7Ydg24mh53T:XhPIghqnLdEdL5","tlshash":"55e2e7aeb3656b37abfd82a270f44503ae7f79444604042d78ac8ede1189ed171f5b38","size":32427,"data":"","first_seen":"2025-03-08T04:36:23.051019Z","last_seen":"2026-06-05T15:41:35.029545Z","times_seen":1777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc41655e0de9dee5263f9e6a3b776d81","sha1":"4616e26e08f1466a6897dbbf5e98f2005597879d","sha256":"76f6fbbd1ad80fc2b02be17f3b593b8affb562274920bec7ddb82b1cc591c492","sha512":"f7cf90dcd3cd7aa991b760a947ebb0daab4203d53740c6430c711641269271b90a639ab1869e60b5d8d97b42df6e4513fd79e68be2891c78b8c591c0754fe077","ssdeep":"","tlshash":"42e0c0600eda56db054f62b50afe1ccf61a54f2185001d4bdd9cc0800758748de43ac8","size":344,"data":"","first_seen":"2026-02-08T14:29:08.959061Z","last_seen":"2026-02-08T15:12:30.01623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/customify-themejs-js-extra","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5da9027e24aa556cf4676faaadfdca7a","sha1":"73053613b0efc1904725c88168fde69d3e97eab8","sha256":"52d3f56e5d281f118bce890a455644389a592d5e2bbad40026add8b78d99f89f","sha512":"36df208c42461c74802b02008ff8256274e0f2ad51052905c83654bc340c572a79820b0db4725a36e0be9fa3ad8e1cb902a4c2c997abbae13ae996112e6129b8","ssdeep":"","tlshash":"e0f0cd93cad520e918257cfb006ec57616cebd08d74d5a4498c888247a7264c8334e54","size":532,"data":"","first_seen":"2026-02-08T14:29:08.961512Z","last_seen":"2026-02-08T15:12:30.016828Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a258f32c43a06d793a0357afd9804b0","sha1":"42304900c481ed883dfcb13f1e2ab03489f19d3f","sha256":"7ac143f06406c57ed44ebf467bdaf907b1abaaf633ef0e7a8307308d2e59f9e9","sha512":"5f64ac07e61be6871c107bdc64ff57696729f3152daf467c7b847da1dcbb247962f5498f90cccbf35338feabbcaac1b85199f68678b73326ff4bac5d6e165a22","ssdeep":"","tlshash":"1fe0c2938ad620e918257cfb006ec6b616cebd08174e9a4498c888247ab264c8334ea4","size":294,"data":"","first_seen":"2025-12-03T06:52:11.401192Z","last_seen":"2026-05-22T15:35:30.505695Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/forminator-front-scripts-js-extra","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bbb9e96d832cabb142056a593f82a8d","sha1":"326c817434b034070d987e160473160efbf16ec4","sha256":"3eabab4d7214070af15063f99ed3889d64a847c2a6489f0cbc2670ebbad831dd","sha512":"447c21d675333c3f6c8160a8e19861fcdada15f9a3af52ee1e8eca5ab8393ce22e449b3371934e2ca86432fdf5dd56dc3228e5677458b1ae81fa81eb7d5858a1","ssdeep":"","tlshash":"2c31fd53c4dc0f7b13f246f8a8852b0656922115c7615e2faceec1280a18c5ffb932e4","size":1543,"data":"","first_seen":"2026-02-08T14:29:08.964959Z","last_seen":"2026-02-08T15:12:30.017927Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1770417835","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"03f4952cf683cf16ef7ca8f64ad5cf1a","sha1":"540373b8c7439361de9b38a234efdcb5fe16debb","sha256":"1fffd7c883b4b02615647f18b3f2deebec0215fb3613e3d9b17bd3fc24d419d4","sha512":"d1e2dbc279124ddfb5da965d783d3a44f3a77cea01cd4bc9cce5e703c56637f88fa4c7293bcc642e7ccdba6914fcfde10175df902d8725c493564758644617d7","ssdeep":"96:WwCpc00VOl9hhLdE/o2nN5QYb7ZQydNUT3knzVQ6cRJ6y3tBDO:TCpc00UjhhLAbuYb7Z6TUzS6cRJ6y3/C","tlshash":"cbb194ccb9d2f46103a771b1c02f504fe23aa955e4099891c54cd8e5bc791ae8a33ebc","size":5595,"data":"","first_seen":"2026-01-21T00:11:25.975266Z","last_seen":"2026-05-15T19:45:21.830392Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f05a485137035a54073d9c10cfe3ea19","sha1":"c514ded15cf52638068c129303cfed5984838323","sha256":"8a79403c807498071b83b5cc1c5e6c94103a55f61b037d569525c6821b44cef8","sha512":"6c8a07f1d17b2a727cd8f59a04334e929e5e11130247ea43cc921d0431948b0891e46a5bc132b6e98746732b111077563ecb914cce9585628eb59cd40e5debf6","ssdeep":"384:ID7/cBNEWr0r5FASurX12mOXcDpaDJuiednfv0ZWAFiIhsKgXb9nwUSf:EsNVrjDmRtZWAFiIyKgL9nlSf","tlshash":"b092a544766927a215ee3472a3dfad81f1311738d8104e9069eec4e42d78dc9a327f7e","size":20895,"data":"","first_seen":"2026-01-13T21:37:02.391445Z","last_seen":"2026-06-05T15:41:35.082345Z","times_seen":545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-06T20:10:47.53975Z","times_seen":822047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-06T20:12:14.239362Z","times_seen":260706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/hostinger-reach-subscription-block-view-js-extra","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9715581d8918f0b91e8faa981c16f6fc","sha1":"277cb9352bfef810a3c52917bb3d350e12cb6790","sha256":"2f8d83a3baa3f31c6ca85e6b14ae0e76400bbaf5bd753a1f35f27826b71cfd36","sha512":"bd171eb6aec8c680810c457d0d20857a0ceb36bed12bbe74341dc93b5102687bd6ba9a3b6df6ce194b328d175b45b4b8fde1e8059da7497aca7ce572583cd931","ssdeep":"","tlshash":"a0f0c060ceda56db054f62b50afe1ccf61e54f21c5101d4bdd9cc0800758748de43bc8","size":575,"data":"","first_seen":"2026-02-08T14:29:08.963259Z","last_seen":"2026-02-08T15:12:30.019012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T20:10:35.406682Z","times_seen":891675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/build/front/front.multi.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"00499512c06f8b6a2aff8b64c9a19e20","sha1":"5cbd88b6b8aad05344f4d0bb3420c46ce46a59e5","sha256":"294d48b01b206866f6744186fc72dc3e3ace1d63b429606fd2312d88b6771a70","sha512":"81c3666a3556f4e83940ba1bda0820d3652e1c8f95366d39614c865d9cbeab7e510be79d87e86e75cf0b3874c5a7c5d60f89af5deaea3e97e3c3ae243f22f15a","ssdeep":"6144:/88PLDrEVOT7GQzs3qKi3owEP95kToXKI:hvr2qzs3qBo3","tlshash":"0844d94475b071d102a73172c19f4d06f2256b79e80a9684beeed8f1adb8dca5323f36","size":263162,"data":"","first_seen":"2026-01-13T21:37:02.38746Z","last_seen":"2026-05-31T09:21:45.846974Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"27c-698672b6-810f573e6702fe56;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 265\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (492)","md5":"02413208206794312655aed4313b5500","sha1":"d8204d1cf48b0482af1ba7229829b7f882e901b6","sha256":"6d11d34f8e3d4168dc0b96d3587507e835289033f47838d8d633fdd6d8157fd5","sha512":"d5f76e029d1600e73b85f610be428393affc07d76da5be55c5fe09656536094c7de28940a23ed12f444b241fa097f4a435b335c52b259b7cab4c51220e84d4b2","ssdeep":"","tlshash":"97f04977f9a02204d2205d749b837fbe8a3e426417018f69a988fbb403014df0703b28","first_seen":"2024-12-20T15:59:59.191091Z","last_seen":"2026-06-06T15:33:42.920716Z","times_seen":2366,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/css/intlTelInput.min.css?ver=4.0.3","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/css/intlTelInput.min.css?ver=4.0.3 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"596c-698672b6-e673d0582c853769;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2484\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22891)","md5":"ef8e5f85ba03f4679e2c7b1fea4a9448","sha1":"3858fec8bfe5257796725cc272b0429a8467c228","sha256":"6e04449fa411c677b375ac0d9860cf8103dbd48c72fc0ab1551f34530bfeba03","sha512":"d31224a4c8ee9a310d6112d67f122522095f4b90be92b0170c36aee40422293816b5c7d1737c558793cd836feb977237d61628f9e4737f832e794c0463a85ec2","ssdeep":"192:eb5SyTWLNF5mpJBcziLFhrSKPftPpStm3xsO/nUrHmgxhc/qNuDrvRxAaoUFSr:upW/yJBuiL9/nyKbY","tlshash":"7ca2cc1359343a2b9279e8b8b3d25ef9336b5ac034d28a929ded861154437c143eff78","first_seen":"2025-03-08T04:36:23.039486Z","last_seen":"2026-06-05T15:41:35.076548Z","times_seen":1280,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/css/buttons.min.css?ver=6.9.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-includes/css/buttons.min.css?ver=6.9.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 22:43:31 GMT\r\netag: \"17ad-69866e93-484d4972321ad545;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1270\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6026)","md5":"5c113141f5f44bd474a14e5b75e00595","sha1":"9f06dcadb72fc200d5a9b258a58f3804d6f4181a","sha256":"d5a5fea14a12ec9ee91f044a7ff810602662c97d3fad8728497ea4e8c5aef0eb","sha512":"71229398a5cb3cb084aec606a988a92674d3a035df76b0360206e688673b31b07136e8462c624aced748251988ca56f4e4abb0b607eaaa5d173aab325eae4031","ssdeep":"96:lBIiP1NQxABpLsSzYOzCRF3HohBmdOI1q6nW0oTX2E2d/uj2Oc1Zh+r5wuHCcMMI:TZhTw/DV3CXdL+","tlshash":"c1c18eebd141d3193e1276e592626da2f32ffa1590b86be6ac1461fc42c5070341eaeb","first_seen":"2024-02-14T11:04:38Z","last_seen":"2026-06-06T18:42:21.679703Z","times_seen":15800,"resource_available":false,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/js/library/intlTelInput.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/js/library/intlTelInput.min.js?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"7eab-698672b6-1542d1593193f0f1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11351\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":32427,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32059)","md5":"4c663822727a5c2785a10ac97f102b80","sha1":"abb1c43edac9e7175ea3baec6a4068c66b1c7238","sha256":"60841d7c0aa703762f43a02c69547e9f97ee104c5b3e5c1289c476e3fdfd2ade","sha512":"3b0cf8cee38ad56c2b976437745c7596890b3571fb4108afb48c8b4b78a9a0bc71f3d18533db57330fcac8e782a6c60592f19a553a47ee973efb496da53402e9","ssdeep":"768:X5l03XVqC/iPIgVXpwJxCqnU7qaMNjUA7Ydg24mh53T:XhPIghqnLdEdL5","tlshash":"55e2e7aeb3656b37abfd82a270f44503ae7f79444604042d78ac8ede1189ed171f5b38","first_seen":"2025-03-08T04:36:23.051019Z","last_seen":"2026-06-05T15:41:35.029545Z","times_seen":1777,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/themes/customify/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:10.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/themes/customify/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/wp-content/themes/customify/assets/fonts/font-awesome/css/font-awesome.min.css?ver=5.0.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:10 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Fri, 06 Feb 2026 23:05:25 GMT\r\netag: \"12d68-698673b5-895845407e1a2b7f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Sun, 08 Feb 2026 15:12:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-06T20:11:34.55444Z","times_seen":490935,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":639,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:10.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:10 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 22:43:30 GMT\r\netag: \"58ea-69866e92-e0a1f8c51e697866;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4891\r\ndate: Sun, 08 Feb 2026 15:12:10 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-06T20:12:14.239362Z","times_seen":260706,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/css/dist/block-library/style.min.css?ver=6.9.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 22:43:31 GMT\r\netag: \"1d23e-69866e93-c7d236db75c77d5f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14626\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"b592e353685f2eabaf8f935e377a95a0","sha1":"30d4a0ff9561f9c96a0a29cce379dfbde9749a65","sha256":"3b44e208bba827e614cf1e36e639e3c7cfb849771fb17e99bb38e14022d30d16","sha512":"193686fe6c1766b540e311015484745ad2ceddb9ffc3f883ac3ae66f1d29e32bca94ba11d40f3d0f6689c306f7760ae167d8af73a22778aba93a772e076a9cd4","ssdeep":"3072:WoeJBCCUQg5MG7x+qehvP0xdclkWwbFpPu:CfUQg5MG7x+qehvP0xdclkWiF0","tlshash":"cfc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2026-02-03T19:45:02.649878Z","last_seen":"2026-06-06T20:05:30.271163Z","times_seen":45481,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/themes/customify/style.min.css?ver=0.4.13","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/themes/customify/style.min.css?ver=0.4.13 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:05:25 GMT\r\netag: \"25bda-698673b5-f6367b6b7f7ae34a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19380\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":154586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63435)","md5":"5a71a82c432ec86ef08b7c1e2a4369ea","sha1":"64237db36454b6596243ca1f230f165a50d976fc","sha256":"1c5faa9668d4f39e18816a1e55e3df90946dabfc7490b2682c9837aac4230512","sha512":"61ff4230e732f20f836041c109a3b82b53512aa0371fdba0feba5d481dd2f19221e84cd07483f2aade4f2e6bb63ee2002a617374085e71618da1fea691799776","ssdeep":"768:XHcOV44SR68A+z48dTS8deOVQEESCEcO5yPVMf/8L/uquz/yZk6EX2oFF:XHutdTzdesCEcO5yPA/8LsL","tlshash":"fde362a359e422be68a35e0f51a8f218303be610df629f81f7f5f85416a5e8d1432937","first_seen":"2025-11-19T01:03:20.568853Z","last_seen":"2026-06-05T19:23:25.028608Z","times_seen":169,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"ec2-698672b6-6899b8ef3d6a8f75;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 810\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3778,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3586)","md5":"3c153981f98a9432628cc5a683a4098a","sha1":"c46424b5bf691af9d399987999edf3947feca51a","sha256":"d16452e0638280b5dcc1ef42f6ef47acb53c07e10a04395cb8f60cf9cc99cc71","sha512":"3535a8a0f599f76f451a960e0c8a62ed52017506c36990b1793fc22f62a68954d1c20d4349167aeb48a4bfca1139cca9b1a5c39987ece0721d376bd56f6112fa","ssdeep":"","tlshash":"7e716b76eca106c2d731adabd7c86e950514f322b8500ed9b98ed44dc7e12ea138773d","first_seen":"2024-12-20T15:59:59.189068Z","last_seen":"2026-06-06T13:44:42.085653Z","times_seen":2192,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"1456-698672b6-8ce394d73a9b3125;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 552\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5062)","md5":"94585ddc196845fb277330318167528a","sha1":"1fb2046e3038810e15d26bc315f796e47466c604","sha256":"bf8f40da4832a13bcd91915ad22cb00f8a6f52eb4f36e89b44d4bef7a2c93fd9","sha512":"1a75a453a416e7b8fd57589d31416d6b7f332858d7c30fb8e12737dfe36b6233ec82d571f66086e1ca225ccd9cc3bf99861a616014eab93559aaecd520271a9f","ssdeep":"96:Wtvt2t4t3t0thtrt2tXtqotmtROtEtFqfthtWmthttgtptVtPtdtrt/t0tyQt1tO:Wtvt2t4t3t0thtrt2tXtqotmtROtEtFf","tlshash":"b5b16da6bcbc277431623d30d7ea6dd0441297142622efd21fedcc462a4a7e66707bb4","first_seen":"2025-05-07T13:22:46.686915Z","last_seen":"2026-06-06T15:33:42.921295Z","times_seen":1404,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/uploads/2026/02/66cde96af703e7c60bc760c7_66cde82f145359f1d9cabb0e_Zoom20Pro-1021x1024.png","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/66cde96af703e7c60bc760c7_66cde82f145359f1d9cabb0e_Zoom20Pro-1021x1024.png HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 06 Feb 2026 23:12:53 GMT\r\netag: \"22096-69867575-f8e13d0a813581fb;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 139414\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":139414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1021 x 1024, 8-bit/color RGB, non-interlaced","md5":"572efbbcfab6d4a17b74e3e3048a3cdd","sha1":"dcbfd288a10e08027e35f0e365ac7aeca6446a38","sha256":"d483f2a9c37e548022b79f83783cdd68d310e8f407a7e578d4aca87258a7ed23","sha512":"092a3574e8048f55a09e1c985a7caafa692c167d00c890c7f5b6740b47b5be05717dd277c226cf3c4f8ca3aa13fd96ad951ff758cc46aaae7629e84bf9bd52c6","ssdeep":"3072:mtflZ21Qbl6Abncx55iWDgh3XGWWtWtsCWpNK/0NBfthYwf:mtf321alBbncxfiWDaNWtWtYxTYo","tlshash":"6fd3f19bfc79f9610907a97218261bcf119fcb42a0e85c48cc7291ad1ae7c38b55dfe0","first_seen":"2026-02-08T14:29:08.929823Z","last_seen":"2026-02-14T17:11:29.793401Z","times_seen":5,"resource_available":false,"data":null}},"time_used":974,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":724,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/themes/customify/assets/js/theme.min.js?ver=0.4.13","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/themes/customify/assets/js/theme.min.js?ver=0.4.13 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 23:05:25 GMT\r\netag: \"366c-698673b5-5b83e3c008d04046;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3487\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13932,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13932), with no line terminators","md5":"c421c3766dd64263b6052d67db077f02","sha1":"60b1c42fc1294c5b35b6b6b3430e9c96b36ee7ca","sha256":"d7e4ee734117e1b8f68680c65fc4293945f815df5250d0b758915f4c40a80a38","sha512":"f1c05c30897377fb33ed0e3ce00a80e9d89f9cfd1e0b1fd1f68ec99501614fd4566043b05b95b031a53050e413e80b724b48039aae402ad188ae1520e0d03286","ssdeep":"192:aDZ2soiS6tSxYEGKsK6j9sy3G8S4v4/OOaL1zrA4b4GrrzZ/e4kRORdb2fBKoyGf:a5usKiSy3nw/OJPGEoyxpJNqF","tlshash":"9852a6d5ba14247700df5ae662eaaa8c373364dded018050347cdcea19b4dc662a2ffd","first_seen":"2024-10-12T13:59:09.992736Z","last_seen":"2026-06-06T16:56:32.416784Z","times_seen":428,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 22:43:30 GMT\r\netag: \"15601-69866e92-4a606807f1172b81;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29531\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-06T20:10:35.406682Z","times_seen":891675,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"6207-698672b6-db3ea3ffe6dcb500;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7691\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25095,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24955)","md5":"aa64af3761af4d692bc69a2f676a28e3","sha1":"07b35ef1d3551db7b44c034ae4a1d22878b5675c","sha256":"6a771e69902d8e674992bb366177ec9ea7a697da9e65107c92473a672ad82415","sha512":"c98b6f6b04a4d2e5d67d9f457848e35c9de4264d9a3451a266778c6802fd7808e1394ee3fa57f5a27ec7a96529b5ee3de7d810177bb3497975937592e902230d","ssdeep":"768:ycWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47ZD4:yg0d3ioFpg5SUBQyQEny+PaKyCd4","tlshash":"50b2a78976d670065e9720f4909ba60b61b66961e008e83c75b8e4d1bef8fcc50f7f78","first_seen":"2024-06-29T13:37:30Z","last_seen":"2026-06-06T19:50:35.222873Z","times_seen":2915,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T15:12:07.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.19\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://zoom-premium.click/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://zoom-premium.click/wp-json/wp/v2/pages/11\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://zoom-premium.click/\u003e; rel=shortlink\r\netag: \"185-1770436353;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17607\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PressMaximum Customify:0.4.13","description":"PressMaximum Customify is lightweight, responsive and flexible multipurpose WordPress theme.","website":"https://pressmaximum.com/customify","common_platform_enumeration":"","icon":"PressMaximum.png","categories":["WordPress themes"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61027,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8832)","md5":"d9940990a85321e80933f4b201bbb7eb","sha1":"b61678305216b75432ea3c03add32c65c6309a3a","sha256":"b8fc5fbb3ec6060745054583878ccc0b3571162e2adb5b495f8d3ee917e26945","sha512":"b4efd28b58c0387cac17a5473e75594ef8e27b0ed0ef5fc068d467ce582901cbea7b4cc3db1960fbde7c0b0af54ddc608eb82c46001cf380531e966be638ba85","ssdeep":"1536:NahypbRgeFmG0C0koeF0OwzHXWYsVdxO73SCXUW:Nf/geFmG0C0koeFXwzHXWYsVdxc3SCXV","tlshash":"015349729558067b0a1b4bf9d1d8bf25615ad732ce014b4afafdc25807c9ea51323b3c","first_seen":"2026-02-08T14:29:08.95476Z","last_seen":"2026-02-08T15:12:30.008224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2473,"timings":{"blocked":464,"dns":56,"connect":206,"send":0,"wait":1489,"receive":55,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1770417835","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription.css?ver=1770417835 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 22:43:55 GMT\r\netag: \"129b-69866eab-e40bae35997918c7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1033\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2108)","md5":"ce1d6a0c2288ef59ee58c70d14fdbc7c","sha1":"232bb31227a6fc5d53926ff8bcf0b97563e7680b","sha256":"e964964c217f44b532ebf2d02cb35f2b3babb14de9e928ba8bc74ccfb87ebb0f","sha512":"8cc77980d214d36c50215f0ad203fe6334fdc8ed7b4016884cbf8f9d0180db5c2c5054d126eda7de2dbb5e0f401e4a1b101b0787ce125f2a597c35305b303073","ssdeep":"96:MUTgmMv1f0a9fECVheqS/8Mk/K6VacCyTtMcZsKq:70mscfpwNgk2","tlshash":"45a1af3651787fada21b84710bd1458fa398862fd00a16f6cca1d190d7cafa11ddab8b","first_seen":"2026-01-21T00:11:25.973947Z","last_seen":"2026-05-31T20:27:24.817908Z","times_seen":693,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.base.min.css?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.base.min.css?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"c227-698672b6-3d4e6a1607ceea5c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5571\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":49703,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (49555)","md5":"403a3eef184e55e40626fad56b91fd9b","sha1":"59293567a05de1e1d8cbb9d821e112cc4cf73f0e","sha256":"79f5de101acfd498a39835165eeb651f13de6a9d4b45cb7d4ec82fb09cb8a982","sha512":"8805ea4c1da7eb831dcede31579d6296ff9e6bb5e82abb3f56b2655bff6152a1d4932e08c2e0ad65cf24b1daf96bac882ea2dc2d41121ec6209be5b3be525410","ssdeep":"384:o9NbFOCCOCyoO5TaP2DkKQCRz1EeIUBhV3ewJQFuywPNw:qoO5gUBT2ITa","tlshash":"4a233362bdfc236475223935ebc81dc09142db0605a2ffd65eecec95a2a86ed6703374","first_seen":"2026-01-22T04:47:17.189414Z","last_seen":"2026-06-05T15:41:35.037875Z","times_seen":83,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.full.min.css?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.full.min.css?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"e4b0-698672b6-9c624733f5d0aaf7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4774\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":58544,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58394)","md5":"bfa52414f9ec6f1f3d1a9d17bbccfc8f","sha1":"232b9aac55071aacfa60dee8a4eaf5c5d07fbba1","sha256":"6b0b77d1dc8c2e3d09f51befd46e03da508e92aeb51b63c1beec50dad821bd1e","sha512":"c1b66684d94a5a74a5fdd7b21b7013c23a3f7ffd0a063f7512f0f09c626cfb7c416fc18b2774b2f86fbea89c5a760a2f7f100a867dc8f4f60e3135d6930d7bd0","ssdeep":"384:cdReFG7TxICtyfdCdO5Z3Q3/ykuQaFtFuUf:cPumTCCkfwEtFuUf","tlshash":"85439831bdb8173930277936dbd82de112169b0a0562bf9a3deced4613ac1e61387736","first_seen":"2025-10-23T16:57:31.760756Z","last_seen":"2026-06-05T15:41:35.051362Z","times_seen":141,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"519f-698672b6-2135ab840c3608a0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5269\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":20895,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20599)","md5":"f05a485137035a54073d9c10cfe3ea19","sha1":"c514ded15cf52638068c129303cfed5984838323","sha256":"8a79403c807498071b83b5cc1c5e6c94103a55f61b037d569525c6821b44cef8","sha512":"6c8a07f1d17b2a727cd8f59a04334e929e5e11130247ea43cc921d0431948b0891e46a5bc132b6e98746732b111077563ecb914cce9585628eb59cd40e5debf6","ssdeep":"384:ID7/cBNEWr0r5FASurX12mOXcDpaDJuiednfv0ZWAFiIhsKgXb9nwUSf:EsNVrjDmRtZWAFiIyKgL9nlSf","tlshash":"b092a544766927a215ee3472a3dfad81f1311738d8104e9069eec4e42d78dc9a327f7e","first_seen":"2026-01-13T21:37:02.391445Z","last_seen":"2026-06-05T15:41:35.082345Z","times_seen":545,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/forminator/build/front/front.multi.min.js?ver=1.50.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/forminator/build/front/front.multi.min.js?ver=1.50.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 23:01:10 GMT\r\netag: \"403fa-698672b6-84cfac42032dfbe3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44067\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":263162,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"00499512c06f8b6a2aff8b64c9a19e20","sha1":"5cbd88b6b8aad05344f4d0bb3420c46ce46a59e5","sha256":"294d48b01b206866f6744186fc72dc3e3ace1d63b429606fd2312d88b6771a70","sha512":"81c3666a3556f4e83940ba1bda0820d3652e1c8f95366d39614c865d9cbeab7e510be79d87e86e75cf0b3874c5a7c5d60f89af5deaea3e97e3c3ae243f22f15a","ssdeep":"6144:/88PLDrEVOT7GQzs3qKi3owEP95kToXKI:hvr2qzs3qBo3","tlshash":"0844d94475b071d102a73172c19f4d06f2256b79e80a9684beeed8f1adb8dca5323f36","first_seen":"2026-01-13T21:37:02.38746Z","last_seen":"2026-05-31T09:21:45.846974Z","times_seen":126,"resource_available":true,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-admin/admin-ajax.php","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:10.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 38\r\nOrigin: https://zoom-premium.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":38,"data":"action=forminator_get_nonce\u0026form_id=19"}},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.19\r\naccess-control-allow-origin: https://zoom-premium.click\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-type: application/json; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-length: 40\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 08 Feb 2026 15:12:12 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.19","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3e63f509434bd967ec5326809d147d08","sha1":"4e3028f69cae6bc7af58dc2b9ac60c6a66a44877","sha256":"31cc9da40ed861e2626f4bb401566149cebe683c89d01c8603e0af0170d41583","sha512":"bcfb37819212b3720beec3875bc7a3186b4ec178ddfd3bbfde8d7bd8632d2841c964c2b1a269190a17ee93e8c271dd658bd26da941a977804f6eb81851350801","ssdeep":"","tlshash":"6f8004011d014151c40111cc10773d10145513134401000454ccf505c5507173143c77","first_seen":"2026-02-08T14:29:08.933711Z","last_seen":"2026-02-08T15:12:30.011884Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/favicon.ico","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:10.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\nlast-modified: Tue, 22 Apr 2025 07:57:10 GMT\r\netag: \"119f-68074bd6-67c3af1fb967012c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1626\r\ndate: Sun, 08 Feb 2026 15:12:11 GMT\r\nserver: LiteSpeed\r\ncontent-security-policy: upgrade-insecure-requests\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (371)","md5":"b16e9097fc7d3af8ebfcfce7aba0a42d","sha1":"2af3c8408b8445fe81d9a7c8d7cc8e8a05bf80f5","sha256":"e7db95c97a5d45787cc3e40cbcb93b748fefc65bc14e162c746e37f979861729","sha512":"53a7a2c276fbc5159231c162eb863504448515f1a078832b81f1bffeedb1c82932810b66748fd4111d1b8fb866622a5cc63e79e497227b611c90886ba45d3f3b","ssdeep":"96:tr+ulojsBwJG8YqVcqHL/GSrrLc1VhrJuzeK:tyoasBwJG8nVjaSeVhrJgeK","tlshash":"0891f88f25f381452603c99037f9b61499554007f685eca8bdee9228cfc4b8a41e3bdc","first_seen":"2025-04-22T08:45:29.599713Z","last_seen":"2026-06-06T19:35:02.611161Z","times_seen":33722,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":865,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/themes/customify/assets/fonts/font-awesome/css/font-awesome.min.css?ver=5.0.0","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/themes/customify/assets/fonts/font-awesome/css/font-awesome.min.css?ver=5.0.0 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Feb 2026 23:05:25 GMT\r\netag: \"7918-698673b5-b0dc2678fe984618;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6628\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-06T20:13:23.491989Z","times_seen":283130,"resource_available":true,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/uploads/forminator/19_e883dc97e9372f8b11fc78986708cc17/css/style-19.css?ver=1770431408","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/uploads/forminator/19_e883dc97e9372f8b11fc78986708cc17/css/style-19.css?ver=1770431408 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 07 Feb 2026 02:30:08 GMT\r\netag: \"8700-6986a3b0-ad25b841077949ea;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2643\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-robots-tag: noindex\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f6aec19c418cd3e6c8af6deedd4d0584","sha1":"df32c9366803c7027d792f5ff1c68b0f53830c4c","sha256":"7723b8337fb351ee62c5c168190443c9561123669881f3d4d72f7f70208e4402","sha512":"e707b172f6e3eaed27341975f695a2dc3994dcedfaa0effdb120106de2222dd46891060ab35d5784cfa35ef011e4b9ea6770e6ce2eb384e1c0cce387e876f877","ssdeep":"384:bFWCtZr+wz0pjWl4dXLV/3tNXXPySeV/2CvDPxHPBhvvXqPDJ3bJbl+i1Nwxk:cxYk","tlshash":"ddf2b632bdfc832a631e3c39ebe8ace11aa0175a04a07f957cddc49575842e05397b76","first_seen":"2026-02-08T14:29:08.944162Z","last_seen":"2026-02-08T15:12:30.013813Z","times_seen":3,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1770417835","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-content/plugins/hostinger-reach/frontend/dist/blocks/subscription-view.js?ver=1770417835 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 22:43:55 GMT\r\netag: \"15db-69866eab-938ffc9d88f0b284;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2377\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5595,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5549)","md5":"03f4952cf683cf16ef7ca8f64ad5cf1a","sha1":"540373b8c7439361de9b38a234efdcb5fe16debb","sha256":"1fffd7c883b4b02615647f18b3f2deebec0215fb3613e3d9b17bd3fc24d419d4","sha512":"d1e2dbc279124ddfb5da965d783d3a44f3a77cea01cd4bc9cce5e703c56637f88fa4c7293bcc642e7ccdba6914fcfde10175df902d8725c493564758644617d7","ssdeep":"96:WwCpc00VOl9hhLdE/o2nN5QYb7ZQydNUT3knzVQ6cRJ6y3tBDO:TCpc00UjhhLAbuYb7Z6TUzS6cRJ6y3/C","tlshash":"cbb194ccb9d2f46103a771b1c02f504fe23aa955e4099891c54cd8e5bc791ae8a33ebc","first_seen":"2026-01-21T00:11:25.975266Z","last_seen":"2026-05-15T19:45:21.830392Z","times_seen":485,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoom-premium.click/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"zoom-premium.click","domain":"zoom-premium.click","tld":"click"},"ip":{"addr":"46.202.138.75","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoom-premium.click/","date":"2026-02-08T15:12:09.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoom-premium.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:49:21 GMT","end":"Thu, 07 May 2026 21:49:20 GMT"},"fingerprint":{"sha1":"C2:E2:06:09:C4:06:42:BD:E6:3B:0B:04:0E:E2:D5:21:CC:44:43:EB","sha256":"8A:76:CD:84:13:55:7F:D5:8D:B9:8D:87:15:04:7B:4D:4C:2A:82:55:0B:D6:AE:57:C1:E7:E8:23:21:24:88:47"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: zoom-premium.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoom-premium.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 15 Feb 2026 15:12:09 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 06 Feb 2026 22:43:30 GMT\r\netag: \"3509-69866e92-6641e73289bd1e62;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4671\r\ndate: Sun, 08 Feb 2026 15:12:09 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-06T20:10:47.53975Z","times_seen":822047,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"zoom-premium.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}