{"report_id":"e49ba374-4fc1-4d79-acf7-a57802b10e02","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-03-04T22:20:50Z","url":{"schema":"http","addr":"zoomsecure.cyou","fqdn":"zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.zoomsecure.cyou/","fqdn":"www.zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"title":"Get Zoom Workplace - Microsoft Store","dom":{"size":15846,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"58cd4eb7d4d6970c9c55856b4aa3e958","sha1":"7f03a0850c85d8f2e2f5ea47e9738ea08c836bbc","sha256":"c7f7d418ab6f1da772e21f5ccd440fa180f255731ecdb4d7258abca556a7492c","sha512":"7b87f9bf0a816fff26a446bc4fb9e40c4e388d479e1db7f78708f43fa6f51e345f7a731ef50756a3d6892870eec6ceaebf5d06114aff8f34d862727f1f316ba3","ssdeep":"192:xr4r0FOJlkDFXr0m7I+UWGvEBu6ca9idzEh93TFjufJksPJFeWe2uhfo37C3PsyC:6SFcgl9mPZe2uhMWPWyfx+im","tlshash":"c562968ba2f30062291364b67fb767063761d107c60ece693eec53588f8999598737cc","dom_hash":"domhash22ba9add7b334b33dc4dca51ae009de3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zoomsecure.cyou","fqdn":"zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T22:20:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-04","alert":"Detects file containing Telegram Bot API","trigger":"www.zoomsecure.cyou/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"st1.zoom.us","ip":{"addr":"170.114.45.1","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2002-04-24","domain_rank":32910,"first_seen":"2015-02-12T22:08:18Z","last_seen":"2026-02-25T23:04:08.787859Z","alert_count":0,"request_count":1,"received_data":205272,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets.zoom.us","ip":{"addr":"52.84.151.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-04-24","domain_rank":633281,"first_seen":"2019-06-05T18:15:14Z","last_seen":"2026-02-24T14:13:09.806803Z","alert_count":0,"request_count":2,"received_data":1056745,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"zoomsecure.cyou","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-04T22:20:51.054247Z","last_seen":"2026-03-04T22:20:51.054247Z","alert_count":0,"request_count":1,"received_data":16620,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.zoomsecure.cyou","ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-03-04T22:20:51.055218Z","last_seen":"2026-03-04T22:20:51.055218Z","alert_count":2,"request_count":2,"received_data":17240,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"res.cloudinary.com","ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2011-05-24","domain_rank":21175,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2026-03-02T07:33:19.610244Z","alert_count":0,"request_count":1,"received_data":123620,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us01st-cf.zoom.us","ip":{"addr":"52.84.151.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-04-24","domain_rank":1389468,"first_seen":"2026-02-24T14:13:09.081341Z","last_seen":"2026-02-24T14:13:09.081341Z","alert_count":0,"request_count":1,"received_data":2790,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"www.zoomsecure.cyou/","fqdn":"www.zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"b7c7a17a0825116323f4846504c78e2e","sha1":"bbc395e6845a3d2f6cea361f9749cf4b95e67bae","sha256":"3e5eb092a38a172b3076fa045a2b4b2150ec034ae01bf2283367630f5fe5ae2a","sha512":"b6263fd6b2a0c881b2631d8813dba4fba291ce7f56c699c700e5508a2effcb982f5442a65093dde826d861c03e42ebd323e8fb49244bd075bcad143774aa6b29","size":3505,"token":"8088768999:AAGOnoQv29ei2wFrkjFFbQEwcnQF2cQeO3M","is_revoked":false,"bot":{"token":"8088768999:AAGOnoQv29ei2wFrkjFFbQEwcnQF2cQeO3M","user_id":"8088768999","username":"Fatwirebot","first_name":"Fatboy","last_name":"","chat":{"chat_id":"5815070117","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.zoomsecure.cyou/","fqdn":"www.zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7c7a17a0825116323f4846504c78e2e","sha1":"bbc395e6845a3d2f6cea361f9749cf4b95e67bae","sha256":"3e5eb092a38a172b3076fa045a2b4b2150ec034ae01bf2283367630f5fe5ae2a","sha512":"b6263fd6b2a0c881b2631d8813dba4fba291ce7f56c699c700e5508a2effcb982f5442a65093dde826d861c03e42ebd323e8fb49244bd075bcad143774aa6b29","ssdeep":"","tlshash":"e271554e62b759315a2b79bb636bb7043161800b3c15ed953eadc3410f25d3680bf7da","size":3505,"data":"","first_seen":"2026-03-04T22:20:56.571049Z","last_seen":"2026-03-04T22:37:05.3357Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-04","alert":"Detects file containing Telegram Bot API","trigger":"www.zoomsecure.cyou/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.zoomsecure.cyou/","fqdn":"www.zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T22:20:28.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoomsecure.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 17:51:59 GMT","end":"Tue, 02 Jun 2026 17:51:58 GMT"},"fingerprint":{"sha1":"C9:BA:45:91:CE:2B:0F:83:66:3A:3D:F4:29:17:D1:E2:6A:54:08:69","sha256":"40:A3:C1:03:85:C8:B2:DE:A4:56:CA:7E:A5:74:F5:67:9B:84:C9:30:9D:56:36:FA:CB:63:6F:5E:43:B3:1A:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.zoomsecure.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12106\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 04 Mar 2026 22:20:28 GMT\r\netag: \"77da736ed38d3bf6828783de13a9d609\"\r\nlast-modified: Wed, 04 Mar 2026 18:58:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::br9vf-1772662828921-0c832ec1dacb\r\ncontent-length: 5101\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"77da736ed38d3bf6828783de13a9d609","sha1":"f225a5434525e14b6b28eb276acc0330f245f705","sha256":"257607f21710ebf6cf8afa996efbbc6d26903e4b1ed172234f9c135da5dc9710","sha512":"352f9539eabf6974f252ee2400ca276c84aca356d66901008511d63f21d95024a863302121ec6ac6a09a7765f8838409355caa435f07a787b15fc6ff6150fef7","ssdeep":"192:Nr4r0FOJlkDFXr0m7I+UWGvEBu6ca9idzEh93TFjufJeqsZAJ6q3VdFtSfs97C3c:2SFcgl99AsOVdFtSsWPWyfx+i+","tlshash":"bf72a68ba6f30462291764b66fb767063761d107c60dcead3eec53588f8a99198733cc","first_seen":"2026-03-04T22:20:56.554677Z","last_seen":"2026-03-04T22:37:05.331899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":161,"dns":129,"connect":1,"send":0,"wait":10,"receive":15,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-04","alert":"Detects file containing Telegram Bot API","trigger":"www.zoomsecure.cyou/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"res.cloudinary.com/doxg5aia1/image/upload/v1771769777/vecteezy_zoom-logo-in-blue-colors-meetings-app-logotype-illustration_12871376-removebg-preview_adhbzk.png","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"151.101.1.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudinary.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 23 Sep 2025 16:30:27 GMT","end":"Sun, 25 Oct 2026 16:30:26 GMT"},"fingerprint":{"sha1":"77:6B:7C:56:E5:E7:51:42:ED:61:04:B9:D9:26:38:05:21:1C:F9:06","sha256":"F7:5C:28:39:1D:C1:7D:92:F0:E1:D7:3B:EF:A5:AD:B3:36:CD:F3:E5:AA:BE:EF:53:D9:F3:D5:47:D1:F3:4D:75"}}},"request":{"raw":"GET /doxg5aia1/image/upload/v1771769777/vecteezy_zoom-logo-in-blue-colors-meetings-app-logotype-illustration_12871376-removebg-preview_adhbzk.png HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\netag: \"456e70e616f1a838d2e0b16ca40f14f4\"\r\nlast-modified: Sun, 22 Feb 2026 14:16:19 GMT\r\ndate: Wed, 04 Mar 2026 22:20:29 GMT\r\nstrict-transport-security: max-age=604800\r\ncache-control: public, no-transform, immutable, max-age=2592000\r\nserver-timing: cld-fastly;dur=456;cpu=182;start=2026-03-04T22:20:29.159Z;desc=hit,rtt;dur=14,content-info;desc=\"width=500,height=500,bytes=122843,format=\\\"png\\\",o=1,crt=1771769777,ef=(17)\"\r\nserver: Cloudinary\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options\r\nx-request-id: b6debc6a683a2c3cd6a4ce487fd4159f\r\ncontent-length: 122843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"456e70e616f1a838d2e0b16ca40f14f4","sha1":"97a6f0016543e19eca333e70423f700d570f465c","sha256":"943ab002a722c962c29f47f506ff83cd81d6ba02a7771a1621c962624fe4d4a5","sha512":"eaadb1c3e4fd98bb4b8217f9a6e3ea5ea825e6d5f4194270cc90ae80ef8803477d9dc730d6eeebddee169dee79109b6348106b348a51716ac6cbc5d2b3a3d582","ssdeep":"3072:qkv3/F50+K3vQXdrEKJQ+kjHXb3Enc/R2MNz0:qAczebDQ3b3Enm2/","tlshash":"4ac312ca82c777a1051f43d782996d857618af84acd4fe7e12ebd09ea212f4f3c1d5a0","first_seen":"2026-02-24T14:13:13.093898Z","last_seen":"2026-03-04T22:37:05.333983Z","times_seen":5,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":32,"dns":1,"connect":13,"send":0,"wait":470,"receive":30,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us01st-cf.zoom.us/homepage/publish/backup/assets/images/zoom-logo-white.png","fqdn":"us01st-cf.zoom.us","domain":"zoom.us","tld":"us"},"ip":{"addr":"52.84.151.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoom.us","organization":"Zoom Communications, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:41:3B:D9:50:C4:C8:1E:B1:C4:DA:67:B5:EB:96:BF:4A:EC:7B:AF","sha256":"09:4E:8C:85:30:0C:A1:52:37:D6:7C:A5:0A:B0:44:7D:B9:AB:37:7B:B3:E5:E5:A3:18:2C:20:9E:DC:2B:0F:D1"}}},"request":{"raw":"GET /homepage/publish/backup/assets/images/zoom-logo-white.png HTTP/1.1\r\nHost: us01st-cf.zoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2021\r\ndate: Wed, 31 Dec 2025 09:06:22 GMT\r\nlast-modified: Mon, 15 Dec 2025 20:41:06 GMT\r\netag: \"f3af5d80586845ceee67e93ea1425708\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 063bfb014e66ef670fc62ff044660cf2.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 5490848\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, HEAD\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000;\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains;\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: LHR5-P1\r\nx-amz-cf-id: 3SLd7U9bmW1iN4eRm8tJ3nkfiMv4kH5ytmZKQ8B5320MHnSkGTA8GA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 188 x 43, 8-bit/color RGBA, non-interlaced","md5":"f3af5d80586845ceee67e93ea1425708","sha1":"c58c2913de925b6dfbe3ffdcd233beabc55e1c2a","sha256":"dbf86c72c1e35a279d8cc973bc42473e46229844f62cc772ff73fe40de9e48fc","sha512":"ffa656f462c593e68f42e7b2de6402f6797157f785f6189faa81ea718e9355d78fd1f5308ee7f9465161803c9f876669a63c934ec91c91af25d744c3a7dec45a","ssdeep":"","tlshash":"5a414ce94ee7514b40bbc63873d6917fb362500a1e77d7419c0e34f5ec24882c68cb20","first_seen":"2025-12-10T21:02:28.469897Z","last_seen":"2026-07-24T08:57:31.466314Z","times_seen":96,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":49,"dns":0,"connect":23,"send":0,"wait":24,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st1.zoom.us/homepage/publish/primary/assets/img/platform/collaboration.png","fqdn":"st1.zoom.us","domain":"zoom.us","tld":"us"},"ip":{"addr":"170.114.45.1","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoom.us","organization":"Zoom Communications, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:41:3B:D9:50:C4:C8:1E:B1:C4:DA:67:B5:EB:96:BF:4A:EC:7B:AF","sha256":"09:4E:8C:85:30:0C:A1:52:37:D6:7C:A5:0A:B0:44:7D:B9:AB:37:7B:B3:E5:E5:A3:18:2C:20:9E:DC:2B:0F:D1"}}},"request":{"raw":"GET /homepage/publish/primary/assets/img/platform/collaboration.png HTTP/1.1\r\nHost: st1.zoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 22:20:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 204556\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 498327\r\ncache-control: public, max-age=31536000\r\netag: \"917ff8e5c16f72de8ecbdc6001b8ddb2\"\r\nexpires: Thu, 04 Mar 2027 22:20:29 GMT\r\nlast-modified: Fri, 19 Sep 2025 23:40:49 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\naccess-control-request-method: GET\r\ncross-origin-resource-policy: cross-origin\r\nx-amz-server-side-encryption: AES256\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nserver: cloudflare\r\ncf-ray: 9d7444ba1b3935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1121 x 840, 8-bit colormap, non-interlaced","md5":"917ff8e5c16f72de8ecbdc6001b8ddb2","sha1":"aed756402f4813991a7e60f53b2941b849806801","sha256":"fd5f01f71820b14dccedeeb386bea2226d254105962df3b4d4294e1f24a1beb8","sha512":"4b3c67d4d95e049270c1f2534a2cfac35319de4b967abb00f604970cff2b85430d19b9e222bd2438c4242b17d546f40ca456a57242519b1500ff42ed8fc251e6","ssdeep":"6144:tzOtZrmmOOMBr3EMsOEnZMVPCUslcIBgd1:5OzrKpNsCVPBslfo1","tlshash":"d21413144718f217a4ee6a25ee9d34ca13c3c807658af4abdf63f9b42c5835ccc5d0a9","first_seen":"2025-09-25T06:46:12.403325Z","last_seen":"2026-03-23T09:24:43.071316Z","times_seen":68,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":9,"dns":0,"connect":2,"send":0,"wait":49,"receive":10,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zoom.us/preview/meetings/multi-speaker-layout.png","fqdn":"assets.zoom.us","domain":"zoom.us","tld":"us"},"ip":{"addr":"52.84.151.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoom.us","organization":"Zoom Communications, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:41:3B:D9:50:C4:C8:1E:B1:C4:DA:67:B5:EB:96:BF:4A:EC:7B:AF","sha256":"09:4E:8C:85:30:0C:A1:52:37:D6:7C:A5:0A:B0:44:7D:B9:AB:37:7B:B3:E5:E5:A3:18:2C:20:9E:DC:2B:0F:D1"}}},"request":{"raw":"GET /preview/meetings/multi-speaker-layout.png HTTP/1.1\r\nHost: assets.zoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 609431\r\ndate: Wed, 04 Mar 2026 11:12:32 GMT\r\nlast-modified: Wed, 28 Feb 2024 21:23:16 GMT\r\netag: \"5d97814748eca3e2b2f46475ad13bf70\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Yujbbb16fXsSAY7Way68OB8E_YseDSfo\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c58391b07051938ceda6615614fbabb0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: CKDvbOw093Zzn_0h2ZMjA84f5KPJd3ClWROz_IuwVVfzxLDbK5jqRA==\r\nage: 40078\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":609431,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 615, 8-bit/color RGBA, non-interlaced","md5":"5d97814748eca3e2b2f46475ad13bf70","sha1":"0115bee203ef28bda0e203d7a096d577387ae482","sha256":"e2c874adfc8550e1398ba7fbe16834e5aa55e7fceef613ae67e6c6c75068d04c","sha512":"fa6e8c7ccf8d9e41764a34013d5f15f989ae0d4be1642f70ae2969c739d36b4ff98e50b9b8828a4fb37f573fa54b88ae522676970e2f9ccdf9d496f2497a8fa4","ssdeep":"12288:Snb4T6mjaX8YC2fIulTFMWjI4TCYx0jOLKAXjklR+4hc2qrpWEADo4yoW:kn4aXa2fdlTVx0jOLKAXj4R+4hWrpSDC","tlshash":"61d423c54403458e26ff226e262b9a96355033c1281d907f81986a173e37f77ff7ac6a","first_seen":"2026-02-24T14:13:13.096049Z","last_seen":"2026-03-04T22:37:05.325353Z","times_seen":5,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":50,"dns":3,"connect":23,"send":0,"wait":115,"receive":34,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.zoom.us/images/en-us/desktop/generic/in-meeting/50-participant-gallery-view-example.png","fqdn":"assets.zoom.us","domain":"zoom.us","tld":"us"},"ip":{"addr":"52.84.151.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoom.us","organization":"Zoom Communications, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Tue, 29 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"43:41:3B:D9:50:C4:C8:1E:B1:C4:DA:67:B5:EB:96:BF:4A:EC:7B:AF","sha256":"09:4E:8C:85:30:0C:A1:52:37:D6:7C:A5:0A:B0:44:7D:B9:AB:37:7B:B3:E5:E5:A3:18:2C:20:9E:DC:2B:0F:D1"}}},"request":{"raw":"GET /images/en-us/desktop/generic/in-meeting/50-participant-gallery-view-example.png HTTP/1.1\r\nHost: assets.zoom.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 446160\r\nlast-modified: Wed, 23 Sep 2020 17:01:36 GMT\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 06:21:22 GMT\r\netag: \"026e2b1d867ee2e0fd19645084bdf065\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c58391b07051938ceda6615614fbabb0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: 0Co-sh7Ada_AFucBqM9Uh-aM9tXrJXtv6zoKAM5MwHtTK7dxVM8URQ==\r\nage: 57548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":446160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 400, 8-bit/color RGBA, non-interlaced","md5":"026e2b1d867ee2e0fd19645084bdf065","sha1":"96bc068bad41db022b63b4569ed3d037fac19971","sha256":"bec920b73bc21518e535b1b2f02c80bdeedd697b40e585de3d5da01686fe4085","sha512":"b0447c37e708a8ba6020e38c119750d74b56c554da2c0beb38e25329b304d494c269fd6e2ce9b382778e19e159189feb361aad2a97f7590c29b181df7357cdbc","ssdeep":"12288:cxDyJAzPiDVpYDqbpTI6WLvvBcAxhKiTDN:c5yJAzPiDVpYumJLvvBcALKiTx","tlshash":"9e942352a4df09e095d3933a8001a058a6fecc06fdde8190fd2f78396e52b77056b5fa","first_seen":"2026-02-24T14:13:13.095232Z","last_seen":"2026-03-04T22:37:05.334912Z","times_seen":5,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":44,"dns":0,"connect":24,"send":0,"wait":28,"receive":91,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoomsecure.cyou/","fqdn":"zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T22:20:28.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoomsecure.cyou","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 17:51:58 GMT","end":"Tue, 02 Jun 2026 17:51:57 GMT"},"fingerprint":{"sha1":"9E:38:6C:99:9F:06:24:91:99:C8:A5:4A:87:5F:56:2C:E1:5A:F7:76","sha256":"A2:1F:79:96:4D:D3:05:42:66:AE:52:7A:2C:DE:36:20:AD:0C:BC:40:6D:01:3F:77:2D:D8:5C:0F:3A:42:F7:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoomsecure.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 04 Mar 2026 22:20:28 GMT\r\nlocation: https://www.zoomsecure.cyou/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::ln7qs-1772662828733-c9b0c937d200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16300,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T06:15:45.47424Z","times_seen":17557251,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":110,"dns":79,"connect":1,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zoomsecure.cyou/favicon.ico","fqdn":"www.zoomsecure.cyou","domain":"zoomsecure.cyou","tld":"cyou"},"ip":{"addr":"64.29.17.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.zoomsecure.cyou/","date":"2026-03-04T22:20:29.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.zoomsecure.cyou","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 17:51:59 GMT","end":"Tue, 02 Jun 2026 17:51:58 GMT"},"fingerprint":{"sha1":"C9:BA:45:91:CE:2B:0F:83:66:3A:3D:F4:29:17:D1:E2:6A:54:08:69","sha256":"40:A3:C1:03:85:C8:B2:DE:A4:56:CA:7E:A5:74:F5:67:9B:84:C9:30:9D:56:36:FA:CB:63:6F:5E:43:B3:1A:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.zoomsecure.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.zoomsecure.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 04 Mar 2026 22:20:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::mp7q2-1772662829444-19edd61d248e\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e1180f27430a0b53c282c1587e37eaaa","sha1":"0161e25fa5e86a858231e58faffb0a1d4a90b567","sha256":"174a74e68b93c79600554dd17839c2f5bf71823e6b85af442deea2dafd89a79b","sha512":"8c764e116d18d34c802a0d62dc15ae58ca36cd33004bdec8ef76fdf3e6c1f731bcb196b305a070f2152d3902a01098c0b3e7c04146efbdd6b0315a6998c89762","ssdeep":"","tlshash":"27a0241f07410c1d33c400c13401137405110013dff5ff1050dd551411005ddd3450cf","first_seen":"2026-03-04T22:20:56.567903Z","last_seen":"2026-03-04T22:20:56.567903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}