{"report_id":"bc19574b-c4ea-4f55-ae90-22d11130d343","version":0,"status":"done","tags":[],"date":"2026-09-25T10:41:37Z","url":{"schema":"http","addr":"us59webzoom.us/","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"ip":{"addr":"45.59.120.54","port":0,"asn":14956,"as":"RouterHosting LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"us59webzoom.us/","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"title":"Zoom","dom":{"size":3191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0ec092d9f37caa1497db0fe16e6b7a8e","sha1":"8f776c0f919d170932939864ec8932631e8f4ae8","sha256":"f5001063074a0553288ba1d43a1c31e78ee9ce9143bff9b64d7e84eeb61896e3","sha512":"b3a951565117958b8586aa3911f0ff129b916cb63b42166f98841df49d8f36da23248aa22ecb8a2d8e41783ebbf198daccb8427bebc652dd9206c782c5f7456b","ssdeep":"","tlshash":"5e61b53562e210065523e094e7e29f8a74e0813bc49bc744b6fd37a9cfc3841dae3328","dom_hash":"domhash6fca0dea5656b63065a649848412638e","first_seen":"2026-09-25T10:38:45.621061Z","last_seen":"2026-09-25T10:41:38.120264Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us59webzoom.us/","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"ip":{"addr":"45.59.120.54","port":0,"asn":14956,"as":"RouterHosting LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T10:41:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"us59webzoom.us","ip":{"addr":"45.59.120.54","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-09-25","domain_rank":0,"first_seen":"2026-09-25T10:38:42.675188Z","last_seen":"2026-09-25T10:38:42.675188Z","alert_count":0,"request_count":2,"received_data":4017,"sent_data":1028,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"us59webzoom.us/","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"ip":{"addr":"45.59.120.54","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c3a3bc6ea771cc9f6335ba5db53ccff","sha1":"0a529edaa1c84cb3a523e9c608704ab1da17f952","sha256":"aa803bfbb69873cd59fb8af542c8f5f0c974d5ea5ae3603927bcdf54e963f702","sha512":"5db1c6cc431596f0931f75b8dd335df54879291ea7e7e4f78801a83235e1291a64c48aaad3c399ad8b39ea40be310304570b6adaf7a5c918ecf5b34e383f92cd","ssdeep":"","tlshash":"29f0206c22b180a80022702c47cbc98175e8626338428749bf3caa21afc1e0488f57e6","size":602,"data":"","first_seen":"2026-09-25T10:38:45.62912Z","last_seen":"2026-09-25T10:41:38.122434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"USER ID:1790332869762_erpjw86io","filename":"https://us59webzoom.us/","line_number":85,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"us59webzoom.us/","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"ip":{"addr":"45.59.120.54","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T10:41:09.188Z","timestamp":1790332869188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us59webzoom.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 08:26:56 GMT","end":"Thu, 24 Dec 2026 08:26:55 GMT"},"fingerprint":{"sha1":"C3:66:2E:63:06:E5:5B:BE:C6:22:C6:B5:AC:D6:1D:EF:83:49:65:40","sha256":"00:E0:EE:B7:4D:93:60:0F:E8:E4:B7:97:A4:BC:E6:86:DF:98:7D:5C:A7:67:13:A8:D6:28:5B:29:52:5A:2D:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us59webzoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Fri, 25 Sep 2026 10:41:09 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sun, 20 Sep 2026 20:01:16 GMT\r\nETag: W/\"c88-1a0c0689ae0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3208,"size_decoded":1875,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"777df974de6afe71ef12cfb49584aa29","sha1":"d9e8fd34f269862c9b6a6b79ceb9b7539c415bc6","sha256":"5eeefc7ada125a9fee51b56dee2225e021eb866d7c0bc20b044bcc6fb16d17b5","sha512":"ec372cef6ac59d3a89e3db49342ba16df05eb1c310d363c3e98cb45a91e339eebe02c467e06d95deb77d32f44f20dd97384a336c634cf890dba2203af496bd31","ssdeep":"","tlshash":"0361a57561e210065523e094e7e29f4a74e0417bd49bc744b6fd37a9cfc3841daa3328","first_seen":"2026-09-25T10:38:45.626613Z","last_seen":"2026-09-25T10:41:38.121189Z","times_seen":2,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":4,"connect":137,"send":0,"wait":138,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us59webzoom.us/favicon.ico","fqdn":"us59webzoom.us","domain":"us59webzoom.us","tld":"us"},"ip":{"addr":"45.59.120.54","port":443,"asn":14956,"as":"ROUTERHOSTING","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us59webzoom.us/","date":"2026-09-25T10:41:09.767Z","timestamp":1790332869767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us59webzoom.us","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 08:26:56 GMT","end":"Thu, 24 Dec 2026 08:26:55 GMT"},"fingerprint":{"sha1":"C3:66:2E:63:06:E5:5B:BE:C6:22:C6:B5:AC:D6:1D:EF:83:49:65:40","sha256":"00:E0:EE:B7:4D:93:60:0F:E8:E4:B7:97:A4:BC:E6:86:DF:98:7D:5C:A7:67:13:A8:D6:28:5B:29:52:5A:2D:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us59webzoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us59webzoom.us/\r\nCookie: user_id=1790332869762_erpjw86io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.5\r\nDate: Fri, 25 Sep 2026 10:41:09 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 150\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150,"size_decoded":453,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-09-26T04:58:04.175262Z","times_seen":9960,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}