{"report_id":"d89f6011-97fd-42dd-b954-5fd4c08a8095","version":6,"status":"done","tags":[],"date":"2026-01-30T18:53:56Z","url":{"schema":"http","addr":"zoommeetingsinvitees.com","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/Windows/invite.php","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"title":"Download Zoom","dom":{"size":5050,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1db393f545e9e43fc5f3c0bea5762ab2","sha1":"3b118a42c8515a2518f64f8d99893c25981ab0f0","sha256":"4181887c925948fa8437f5c7daddc98cb9f9ffbc095cc638a54dcdd6cd9b40a7","sha512":"2f6ca4e2815934e3f4463b4e526d9575cd96fbd03f35734dd7d35b09d90920aed0494789f52bfaa412e589f90d81301c2a632394de96ebda3a21a2dba0d5fff0","ssdeep":"96:ngOkRlxGZw7N0wMbFalziVJmFyG7m6LkUhh+3:gOkLkeyxawVJayGS7uu","tlshash":"d6a1768b85f3021b5a03f5a85fbb7b1866a2d087d549dd493ddc029dcf85a8489837ce","dom_hash":"domhash6b628f5ec3aff1f5060b2d1345246feb","first_seen":"2026-01-30T08:35:42.427633Z","last_seen":"2026-01-30T21:30:10.987816Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoommeetingsinvitees.com","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":0,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T18:53:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"sampaworks.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"sampaworks.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"play.google.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2026-01-25T23:19:19.536851Z","alert_count":0,"request_count":1,"received_data":5734,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sampaworks.info","ip":{"addr":"209.74.67.51","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T11:08:04.203089Z","last_seen":"2026-01-24T11:08:04.203089Z","alert_count":2,"request_count":1,"received_data":10068226,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"st2.zoom.us","ip":{"addr":"170.114.45.1","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2002-04-24","domain_rank":71283,"first_seen":"2015-03-03T23:04:56Z","last_seen":"2026-01-24T11:08:04.953457Z","alert_count":0,"request_count":1,"received_data":2288,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"toolbox.marketingtools.apple.com","ip":{"addr":"17.33.193.45","port":443,"asn":714,"as":"APPLE-ENGINEERING","country":"United States","country_code":"US"},"domain_registered":"1987-02-19","domain_rank":287040,"first_seen":"2024-09-10T08:11:40Z","last_seen":"2026-01-24T00:00:27.810158Z","alert_count":0,"request_count":1,"received_data":11847,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoommeetingsinvitees.com","ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-01-30T17:22:24.690889Z","last_seen":"2026-01-30T17:22:24.690889Z","alert_count":0,"request_count":5,"received_data":19168,"sent_data":2623,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"tools.applemediaservices.com","ip":{"addr":"17.253.142.4","port":443,"asn":714,"as":"APPLE-ENGINEERING","country":"United States","country_code":"US"},"domain_registered":"2018-11-13","domain_rank":357597,"first_seen":"2020-01-10T22:07:45Z","last_seen":"2026-01-26T13:48:56.460485Z","alert_count":0,"request_count":1,"received_data":11119,"sent_data":507,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0bce4a3e5d0b8abef13d8ddccfe3bdf3","sha1":"8e5cf766bb16a4f2ebaa3c13fc27c8d50d44f250","sha256":"cd6953f73ec8afbf8815cef10c684ac8d1e62b0b83d443d1678f774f17805ab1","sha512":"a7dcaee87f147b16fd1a93ba58af7955642ff90b8b3162b9ae2ee575b7b1a051bc96adb69bb06a70da4f297fc42a140c6f99c936cd4d2d7ce6f15a6077641ccc","magic":"Composite Document File V2 Document, Can't read SAT","size":10067968,"url":{"schema":"https","addr":"sampaworks.info/webs/ZoomWorkspaceinstaller.msi","fqdn":"sampaworks.info","domain":"sampaworks.info","tld":"info"},"ip":{"addr":"209.74.67.51","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"st2.zoom.us/static/6.3.25699/image/new/topNav/Zoom_logo.svg","fqdn":"st2.zoom.us","domain":"zoom.us","tld":"us"},"ip":{"addr":"170.114.45.1","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoommeetingsinvitees.com/Windows/invite.php","date":"2026-01-30T18:53:34.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoom.us","organization":"Zoom Communications, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:41:3B:D9:50:C4:C8:1E:B1:C4:DA:67:B5:EB:96:BF:4A:EC:7B:AF","sha256":"09:4E:8C:85:30:0C:A1:52:37:D6:7C:A5:0A:B0:44:7D:B9:AB:37:7B:B3:E5:E5:A3:18:2C:20:9E:DC:2B:0F:D1"}}},"request":{"raw":"GET /static/6.3.25699/image/new/topNav/Zoom_logo.svg HTTP/1.1\r\nHost: st2.zoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoommeetingsinvitees.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:53:34 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3152748\r\ncache-control: public, max-age=31536000\r\netag: W/\"a28205cc5fd121cd83fb54f2447a6257\"\r\nexpires: Sat, 30 Jan 2027 18:53:34 GMT\r\nlast-modified: Sat, 14 Sep 2024 09:24:08 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\naccess-control-request-method: GET\r\ncross-origin-resource-policy: cross-origin\r\nx-amz-server-side-encryption: AES256\r\nserver: cloudflare\r\ncf-ray: 9c632c410ad10b06-OSL\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1629,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a28205cc5fd121cd83fb54f2447a6257","sha1":"e71c439697074419693fadee65815f7f084dfbe0","sha256":"faae7f9ffd388a586a77086fd80d4b7a90b21c0a237769929ec4c119d487f72a","sha512":"d9eb786538e9b7d490a0f156d94fb6d620832253cbb4a14f2806bd80fbc77ea5ba49d54df948d8c27a178e1fe532718b440d17d874fe26ee44becc96e76d8986","ssdeep":"","tlshash":"7031ceeb436164a267074fd1cd29f4a16cbb2e972731a31c53f5d77230a12dab448e51","first_seen":"2023-09-22T19:45:57Z","last_seen":"2026-08-12T15:46:14.81024Z","times_seen":1810,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":80,"dns":65,"connect":3,"send":0,"wait":26,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"toolbox.marketingtools.apple.com/api/badges/download-on-the-app-store/black/en-us?size=250x83","fqdn":"toolbox.marketingtools.apple.com","domain":"apple.com","tld":"com"},"ip":{"addr":"17.33.193.45","port":443,"asn":714,"as":"APPLE-ENGINEERING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoommeetingsinvitees.com/Windows/invite.php","date":"2026-01-30T18:53:34.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"toolbox.marketingtools.apple.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public Server RSA CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Sun, 11 Jan 2026 21:19:04 GMT","end":"Tue, 07 Apr 2026 19:58:35 GMT"},"fingerprint":{"sha1":"54:E9:62:83:51:D3:66:93:F1:D1:2D:73:C0:7F:51:7B:6D:33:BC:CD","sha256":"F7:06:9D:52:52:6C:7C:4A:11:8B:E2:7A:2C:82:64:AA:FF:15:32:CF:9E:22:23:0B:CD:50:9D:9E:3E:30:1A:A2"}}},"request":{"raw":"GET /api/badges/download-on-the-app-store/black/en-us?size=250x83 HTTP/1.1\r\nHost: toolbox.marketingtools.apple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoommeetingsinvitees.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Apple\r\ndate: Fri, 30 Jan 2026 18:53:35 GMT\r\ncontent-type: image/svg+xml\r\ncontent-security-policy: default-src 'self';  script-src 'self' 'unsafe-inline';  style-src 'self' 'unsafe-inline' https://www.apple.com;  connect-src 'self';  img-src 'self' blob: data: https://toolbox.marketingtools.apple.com https://tools.applemediaservices.com https://apple-resources.s3.amazonaws.com https://*.mzstatic.com;  font-src 'self' https://www.apple.com;  object-src 'none';  base-uri 'self';  form-action 'self';  frame-ancestors 'self';  upgrade-insecure-requests;  frame-src 'self' https://embed.podcasts.apple.com https://embed.music.apple.com https://embed.tv.apple.com;  media-src 'self' https://audio-ssl.itunes.apple.com;\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\ncache-control: public, max-age=604800\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2928664fe1fc6aca88583a6f606d60ba","sha1":"2f2fe1cbd0563b3ce3ea79fcdf1549ed244b3993","sha256":"a26fc5b38380272c92e9019a2eb8b45542a66814b3e2b203772db8904b9fb99f","sha512":"7d6f8b7e54a4da3cf81c767b4aa40c3b04bafe35f2dd77b85944de4442f0b1dd1a8eda0175deb4652cf055094acdc0d4b6e38abe51c52a3dfbf887481315b347","ssdeep":"192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U","tlshash":"7122a3b753748ad262d183c52d2e27a83b74a5feb22042c4778f155abf429b35439cd2","first_seen":"2023-05-03T18:10:19Z","last_seen":"2026-08-12T21:05:51.865947Z","times_seen":9596,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":559,"dns":14,"connect":184,"send":0,"wait":186,"receive":0,"ssl":358},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/Windows/","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:53:33.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoommeetingsinvitees.com.zoominvitesmeetingsxy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:41:29 GMT","end":"Thu, 30 Apr 2026 15:41:28 GMT"},"fingerprint":{"sha1":"30:0C:D5:5D:C4:A8:3C:D9:7F:CE:81:D0:76:38:9B:95:00:12:A5:18","sha256":"6B:68:C8:40:B4:CF:16:98:6C:07:C0:79:F0:52:82:FD:7F:10:32:8D:E4:BC:B4:EC:BE:1F:1F:E4:01:6F:91:B2"}}},"request":{"raw":"GET /Windows/ HTTP/1.1\r\nHost: zoommeetingsinvitees.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoommeetingsinvitees.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 18:53:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nlocation: visit.php\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/Windows/invite.php","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:53:34.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoommeetingsinvitees.com.zoominvitesmeetingsxy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:41:29 GMT","end":"Thu, 30 Apr 2026 15:41:28 GMT"},"fingerprint":{"sha1":"30:0C:D5:5D:C4:A8:3C:D9:7F:CE:81:D0:76:38:9B:95:00:12:A5:18","sha256":"6B:68:C8:40:B4:CF:16:98:6C:07:C0:79:F0:52:82:FD:7F:10:32:8D:E4:BC:B4:EC:BE:1F:1F:E4:01:6F:91:B2"}}},"request":{"raw":"GET /Windows/invite.php HTTP/1.1\r\nHost: zoommeetingsinvitees.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoommeetingsinvitees.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 18:53:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"6e804d7dc86934f7a1de7cb7c567bbb1","sha1":"623a92e75fa73aabff826af0693dbdc945cf35f9","sha256":"3e20c79e1b696c501762a8e22ba1964f583f7bc33e9044c075e26d1e8be3e34a","sha512":"4ead769eb7614438bc454341529c60a82d7256f4fe5690e9a69eb8bcee370c09052c76b4f15ce18c2844b49c0e082e5a750357078350f2b8b9b60ccfc6fde07a","ssdeep":"96:PJtevL3vj8VO1hG0/h+xA7Och6/suhK+4:PJteDo2GoheKO22zI","tlshash":"f4b1130ad1c1111b5733e3989f76ab58fb9350d7c240a5993aec129bcfb99088253ede","first_seen":"2026-01-30T08:35:42.43379Z","last_seen":"2026-01-30T21:30:10.997241Z","times_seen":5,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us?size=250x83","fqdn":"tools.applemediaservices.com","domain":"applemediaservices.com","tld":"com"},"ip":{"addr":"17.253.142.4","port":443,"asn":714,"as":"APPLE-ENGINEERING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoommeetingsinvitees.com/Windows/invite.php","date":"2026-01-30T18:53:34.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apple401k.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public Server RSA CA 11 - G1","organization":"Apple Inc."},"validity":{"start":"Sat, 27 Dec 2025 03:51:18 GMT","end":"Fri, 27 Mar 2026 04:01:13 GMT"},"fingerprint":{"sha1":"1F:63:46:27:8A:92:A9:1C:74:32:DE:57:AC:8E:EF:DD:18:58:CF:D4","sha256":"71:5A:16:45:13:2D:EF:2A:B4:A7:E5:4A:D9:90:09:A6:AE:EF:C7:AE:94:BD:53:FE:BE:07:2E:E8:1D:D0:9A:FD"}}},"request":{"raw":"GET /api/badges/download-on-the-app-store/black/en-us?size=250x83 HTTP/1.1\r\nHost: tools.applemediaservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoommeetingsinvitees.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://toolbox.marketingtools.apple.com/api/badges/download-on-the-app-store/black/en-us?size=250x83\r\nReferer: https://tools.applemediaservices.com/api/badges/download-on-the-app-store/black/en-us\r\nServer: purple\r\nDate: Fri, 30 Jan 2026 18:53:34 GMT\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":10804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":1173,"timings":{"blocked":523,"dns":1,"connect":124,"send":0,"wait":124,"receive":0,"ssl":398},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/intl/en_us/badges/static/images/badges/en_badge_web_generic.png","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoommeetingsinvitees.com/Windows/invite.php","date":"2026-01-30T18:53:34.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /intl/en_us/badges/static/images/badges/en_badge_web_generic.png HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoommeetingsinvitees.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"uxe-owners-acl/play_google\"\r\nreport-to: {\"group\":\"uxe-owners-acl/play_google\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google\"}]}\r\ncontent-length: 4904\r\ndate: Fri, 30 Jan 2026 18:53:34 GMT\r\nexpires: Fri, 30 Jan 2026 18:53:34 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Thu, 04 Aug 2022 06:08:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 646 x 250, 8-bit colormap, non-interlaced","md5":"1e91d02cf5a902f38f2923c006d79281","sha1":"cb8126b32c2274e0394246b40bd0b7f9f847e44c","sha256":"f72611e2df8e88204009fd896d05d5e8e83c77009c63943bbffa169559934849","sha512":"54b69544dc55addc0b2ddc08418d1a0a34240697070fe47feae9e915c70d33ef662ce1b7154cbcad84019d22f3291f138cc7298224d381cc740c2097478d4042","ssdeep":"96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt","tlshash":"b0a18e8f3e019ae0faca1277c6d3c835e4206c672c3767045a82f2ef51a25e7493e566","first_seen":"2023-05-03T20:05:42Z","last_seen":"2026-08-12T12:17:13.951366Z","times_seen":1850,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":142,"dns":0,"connect":20,"send":0,"wait":40,"receive":1,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/favicon.ico","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoommeetingsinvitees.com/Windows/invite.php","date":"2026-01-30T18:53:34.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoommeetingsinvitees.com.zoominvitesmeetingsxy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:41:29 GMT","end":"Thu, 30 Apr 2026 15:41:28 GMT"},"fingerprint":{"sha1":"30:0C:D5:5D:C4:A8:3C:D9:7F:CE:81:D0:76:38:9B:95:00:12:A5:18","sha256":"6B:68:C8:40:B4:CF:16:98:6C:07:C0:79:F0:52:82:FD:7F:10:32:8D:E4:BC:B4:EC:BE:1F:1F:E4:01:6F:91:B2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoommeetingsinvitees.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoommeetingsinvitees.com/Windows/invite.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 18:53:34 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nContent-Encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-12T08:11:23.210605Z","times_seen":41476,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sampaworks.info/webs/ZoomWorkspaceinstaller.msi","fqdn":"sampaworks.info","domain":"sampaworks.info","tld":"info"},"ip":{"addr":"209.74.67.51","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:53:38.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sampaworks.info","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 26 Jul 2025 00:00:00 GMT","end":"Sun, 26 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:AA:6E:96:25:53:2D:93:74:80:AB:D8:F7:3B:18:40:45:C3:19:E2","sha256":"75:E9:74:A5:E9:B7:F7:A0:71:EC:67:11:75:36:58:FC:C3:F3:FE:51:0E:D6:78:C4:00:50:BF:F9:B8:14:F6:37"}}},"request":{"raw":"GET /webs/ZoomWorkspaceinstaller.msi HTTP/1.1\r\nHost: sampaworks.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/x-msdownload\r\nlast-modified: Thu, 29 Jan 2026 16:20:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10067968\r\ndate: Fri, 30 Jan 2026 18:53:39 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10067968,"size_decoded":0,"mime_type":"application/x-msdownload","magic":"Composite Document File V2 Document, Can't read SAT","md5":"0bce4a3e5d0b8abef13d8ddccfe3bdf3","sha1":"8e5cf766bb16a4f2ebaa3c13fc27c8d50d44f250","sha256":"cd6953f73ec8afbf8815cef10c684ac8d1e62b0b83d443d1678f774f17805ab1","sha512":"a7dcaee87f147b16fd1a93ba58af7955642ff90b8b3162b9ae2ee575b7b1a051bc96adb69bb06a70da4f297fc42a140c6f99c936cd4d2d7ce6f15a6077641ccc","ssdeep":"24576:NvaACyjXiS+DUpPZ1oWwATyJb46ZpRurdH1FbRy9HkGbwKfrCSp:Nvjj2DYx/wampROFRYHkGMKOSp","tlshash":"1e25334ea097a9dbe617033cac06a259b3973cbf9ac111d73a89371e06773704bac175","first_seen":"2026-01-30T08:35:42.442355Z","last_seen":"2026-01-30T21:30:11.000273Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4080,"timings":{"blocked":585,"dns":1,"connect":181,"send":0,"wait":181,"receive":2729,"ssl":401},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"sampaworks.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"sampaworks.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:53:33.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoommeetingsinvitees.com.zoominvitesmeetingsxy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:41:29 GMT","end":"Thu, 30 Apr 2026 15:41:28 GMT"},"fingerprint":{"sha1":"30:0C:D5:5D:C4:A8:3C:D9:7F:CE:81:D0:76:38:9B:95:00:12:A5:18","sha256":"6B:68:C8:40:B4:CF:16:98:6C:07:C0:79:F0:52:82:FD:7F:10:32:8D:E4:BC:B4:EC:BE:1F:1F:E4:01:6F:91:B2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoommeetingsinvitees.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 18:53:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 44\r\nConnection: keep-alive\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"0712ce89abf3d56c0ead17b3cf7eb847","sha1":"b66f8851549322ce3979fe0b632978efca33a14d","sha256":"7fd3d2956d216c23e560f747d2ea30fb469986fac634ddc483e38bcca49bdd95","sha512":"49bd0915437f76b602085607753755c95e9c5e697d75d42fa61941bede850c606d9ac4f9369cf1bc12e6551944a1b0dc6e009bb8b9194bd72b0de72c052c924c","ssdeep":"","tlshash":"f59002490e10930031b110024526a20d141244d66444d09100d54010b42038b491a996","first_seen":"2025-04-23T18:54:22.487114Z","last_seen":"2026-07-30T20:00:34.877968Z","times_seen":129,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":55,"dns":1,"connect":18,"send":0,"wait":179,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoommeetingsinvitees.com/Windows/visit.php","fqdn":"zoommeetingsinvitees.com","domain":"zoommeetingsinvitees.com","tld":"com"},"ip":{"addr":"89.163.155.33","port":443,"asn":24961,"as":"WIIT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:53:33.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoommeetingsinvitees.com.zoominvitesmeetingsxy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 30 Jan 2026 15:41:29 GMT","end":"Thu, 30 Apr 2026 15:41:28 GMT"},"fingerprint":{"sha1":"30:0C:D5:5D:C4:A8:3C:D9:7F:CE:81:D0:76:38:9B:95:00:12:A5:18","sha256":"6B:68:C8:40:B4:CF:16:98:6C:07:C0:79:F0:52:82:FD:7F:10:32:8D:E4:BC:B4:EC:BE:1F:1F:E4:01:6F:91:B2"}}},"request":{"raw":"GET /Windows/visit.php HTTP/1.1\r\nHost: zoommeetingsinvitees.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoommeetingsinvitees.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 18:53:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nlocation: invite.php\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":444\"; ma=2592000, h3-29=\":444\"; ma=2592000, h3-Q050=\":444\"; ma=2592000, h3-Q046=\":444\"; ma=2592000, h3-Q043=\":444\"; ma=2592000, quic=\":444\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5235,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}