{"report_id":"e91b1e69-5b13-4648-9d8c-882eb8953dc7","version":6,"status":"done","tags":[],"date":"2026-05-23T13:27:37Z","url":{"schema":"http","addr":"meetcalling.net","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"meetcalling.net/","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"title":"Visioconférence","dom":{"size":756,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9a0c9eac029afdb630e688c8df4a9076","sha1":"e95c3dff579e2e5ee3b22481001c8c815ddc11ea","sha256":"cd23815194a6e22267c542b55d853522bd84365205eaf309ee8f4480c4d11b71","sha512":"eef2f57643f7466eb1e7c000bb7e2cb6575098841f26f37b0b9ccd2af583b34357fcf50aca6e66b7eac331b29b184b2a03810c1f61c5e45f1dd4a33f607f4ec8","ssdeep":"","tlshash":"0f0110952cd154a7c0a485c12cb3a7152de0d91bd74f490073ee45e90fc6e93ce83958","dom_hash":"domhashbe14d09c2d77d5e419e549f22ef8d836","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meetcalling.net","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"63.176.8.218","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T13:27:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"meetcalling.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"meetcalling.net","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":7792,"sent_data":1763,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"meetcalling.net/script.js","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"414b7fe010d457a0453f8c8a6940817b","sha1":"369b0d072b53a33284face17672c07752c91ad5a","sha256":"1caacec8b2efd7686e246555fde86153f9f4e9c2afb495170d21c9795cae6a05","sha512":"ab006bc53da6d518c3584986a524be1c1989c0e98939893992c18bfdf7183e8fe3f0169268f572ca94ef1a2412c702865d3cb95d7afff5696befc53ddf805770","ssdeep":"","tlshash":"e8c012a893844811462182c396a096d5657855fde3a582d51124075e6b82e905504de5","size":184,"data":"","first_seen":"2026-05-23T13:27:41.531635Z","last_seen":"2026-05-23T13:28:31.028075Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"meetcalling.net/script.js","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meetcalling.net/","date":"2026-05-23T13:27:16.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meetcalling.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 13:27:50 GMT","end":"Wed, 19 Aug 2026 13:27:49 GMT"},"fingerprint":{"sha1":"E5:1F:0B:67:79:74:B0:65:7A:9A:68:5D:5A:A4:5C:0A:FE:42:67:26","sha256":"31:BF:8E:6B:DC:E1:BD:98:9F:F4:FC:D2:BF:C2:1E:67:ED:1A:FF:D7:B3:8C:4C:57:1B:DD:68:D8:4C:8A:4E:0D"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: meetcalling.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meetcalling.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 52472\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sat, 23 May 2026 13:27:16 GMT\r\netag: \"c6b293ae0c51024fa7f8c9a232badfb7-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KSAG9HFV9F9DJ9PFR9TC9CP1\r\ncontent-length: 184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"414b7fe010d457a0453f8c8a6940817b","sha1":"369b0d072b53a33284face17672c07752c91ad5a","sha256":"1caacec8b2efd7686e246555fde86153f9f4e9c2afb495170d21c9795cae6a05","sha512":"ab006bc53da6d518c3584986a524be1c1989c0e98939893992c18bfdf7183e8fe3f0169268f572ca94ef1a2412c702865d3cb95d7afff5696befc53ddf805770","ssdeep":"","tlshash":"e8c012a893844811462182c396a096d5657855fde3a582d51124075e6b82e905504de5","first_seen":"2026-05-23T13:27:41.531635Z","last_seen":"2026-05-23T13:28:31.028075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"meetcalling.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meetcalling.net/favicon.ico","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meetcalling.net/","date":"2026-05-23T13:27:16.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meetcalling.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 13:27:50 GMT","end":"Wed, 19 Aug 2026 13:27:49 GMT"},"fingerprint":{"sha1":"E5:1F:0B:67:79:74:B0:65:7A:9A:68:5D:5A:A4:5C:0A:FE:42:67:26","sha256":"31:BF:8E:6B:DC:E1:BD:98:9F:F4:FC:D2:BF:C2:1E:67:ED:1A:FF:D7:B3:8C:4C:57:1B:DD:68:D8:4C:8A:4E:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: meetcalling.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meetcalling.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nage: 20123\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 23 May 2026 13:27:16 GMT\r\netag: 1778798909-ssl-df\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KSAG9HHRFKJ9VK55BDYVJG5N\r\ncontent-length: 1203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0f89e18d0abacb99149c5e59bf69b5e1","sha1":"9e1ebb10be890c5855eec444233c028270d3e65a","sha256":"8514f0009a58c6e0acb5468f88037732b59b70af5e524f452e3bef8fb33effc5","sha512":"5275d80f3f8f1f5e0d1b6b6b0745732a69d669d66dcdab418fc5a2094bffcb81ff1d34252c97c6dffe5470f0d359a3be03cfd3dfe3d729bf186917c8cf21ece0","ssdeep":"","tlshash":"1f61848dc9a7209b5c93643e27eb560a2274a247cd46da4c3fde6348cf492f214d36ac","first_seen":"2024-12-12T10:00:11.490986Z","last_seen":"2026-06-06T14:53:56.444279Z","times_seen":11715,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"meetcalling.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meetcalling.net/","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:27:16.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meetcalling.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 13:27:50 GMT","end":"Wed, 19 Aug 2026 13:27:49 GMT"},"fingerprint":{"sha1":"E5:1F:0B:67:79:74:B0:65:7A:9A:68:5D:5A:A4:5C:0A:FE:42:67:26","sha256":"31:BF:8E:6B:DC:E1:BD:98:9F:F4:FC:D2:BF:C2:1E:67:ED:1A:FF:D7:B3:8C:4C:57:1B:DD:68:D8:4C:8A:4E:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meetcalling.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 52473\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 23 May 2026 13:27:16 GMT\r\netag: \"81fb066f5ffab1d0ee1420c54dcc1d4c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KSAG9H9SGZRTSJ82QG5PKM89\r\ncontent-length: 788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":788,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"24a996f1d53947beb6e23c45e08b151b","sha1":"0d35a7eb4cbecd084b71acf43a2c985d75ebb3ba","sha256":"336382537fde213ab04ccc3b8c67acebd528362fb060b367914b0722e823ba00","sha512":"8faa27865410832b779d99fca18b040663c2f0f8701ee4414c7b1add21b41455c113a5737f6aabb7e3a2f492403d897751c8b45cdabb8549a16537e6da24d83a","ssdeep":"","tlshash":"5101bd652cc2686281f181953c62a71dfb91c5c7e7461e0072dd53972fe3e51cd83948","first_seen":"2026-05-23T13:27:41.544837Z","last_seen":"2026-05-23T13:28:31.011313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":188,"dns":20,"connect":22,"send":0,"wait":23,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"meetcalling.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meetcalling.net/style.css","fqdn":"meetcalling.net","domain":"meetcalling.net","tld":"net"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meetcalling.net/","date":"2026-05-23T13:27:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meetcalling.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 May 2026 13:27:50 GMT","end":"Wed, 19 Aug 2026 13:27:49 GMT"},"fingerprint":{"sha1":"E5:1F:0B:67:79:74:B0:65:7A:9A:68:5D:5A:A4:5C:0A:FE:42:67:26","sha256":"31:BF:8E:6B:DC:E1:BD:98:9F:F4:FC:D2:BF:C2:1E:67:ED:1A:FF:D7:B3:8C:4C:57:1B:DD:68:D8:4C:8A:4E:0D"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: meetcalling.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meetcalling.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 52472\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sat, 23 May 2026 13:27:16 GMT\r\netag: \"8590e6230f44e0eacd69b5844ed3db0d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KSAG9HFNYZCBAZEH7GBYZFVY\r\ncontent-length: 570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1677,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"29c1dc620c558d1ae93e0cefa13da706","sha1":"e7c121250b91391e15c00c175fd7a9b3b81eec40","sha256":"139eeffb7673516b4a7edd6fc763874f3e3f1342525aad8af8ad1c471e160cb7","sha512":"065d8f460b8d859418ba42403774fcb7519f32e85b3e98edce5f43e09702dcf13c772798b9fa4b0bf122b26f69801c74db1f76d32c1f7ff6cdca95c3988839c8","ssdeep":"","tlshash":"8831e0a9e74a41067333dee07f52af9122c485629202437ebfe5209df1c917e5771b9c","first_seen":"2026-05-23T13:27:41.547977Z","last_seen":"2026-05-23T13:28:31.015744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"meetcalling.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}