{"report_id":"ebfbaca7-f7fc-4f33-8395-388a8c6eb2af","version":0,"status":"done","tags":[],"date":"2026-08-13T19:01:53Z","url":{"schema":"http","addr":"invite-zoommeeting.top/","fqdn":"invite-zoommeeting.top","domain":"invite-zoommeeting.top","tld":"top"},"ip":{"addr":"104.21.26.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jmc.ru.com/Zoom-Invite/","fqdn":"jmc.ru.com","domain":"jmc.ru.com","tld":"ru.com"},"title":"Zoom Meeting","dom":{"size":52152,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (339)","md5":"6084f61e06f6a7336fd37027fa787f95","sha1":"67f0f64f7ebe809b4bb3e5492d98a36314ce3dbd","sha256":"cb40aeec69f126cf5578217006ed7f44665026d8d52decf350ed746c9a28afdc","sha512":"117c5b8fc0814d12327a21ee47c58eef800d3db43a72500fb8a3bfea82c632b08bef1bd8d7398821a4a5b0ceeee70dddb808e37142cae5ab2c4956a95abd7ad1","ssdeep":"1536:G7aom+kAzKjjUjGVIIpF8ybn1nonJnknAC6QeuX:Gqtjjv6QeuX","tlshash":"be33759a5af705197813d0b86baf53167230d007d10ac9183f9c53988f8abd9ddbb7ac","dom_hash":"domhash817b5ef517305a2b23d5dbe9f5a890a3","first_seen":"2026-08-13T19:02:11.493392Z","last_seen":"2026-08-13T19:02:11.493392Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"invite-zoommeeting.top/","fqdn":"invite-zoommeeting.top","domain":"invite-zoommeeting.top","tld":"top"},"ip":{"addr":"104.21.26.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T19:01:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"jmc.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"jmc.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"invite-zoommeeting.top","ip":{"addr":"104.21.26.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-11","domain_rank":0,"first_seen":"2026-08-13T19:01:53.357337Z","last_seen":"2026-08-13T19:01:53.357337Z","alert_count":0,"request_count":1,"received_data":573,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jmc.ru.com","ip":{"addr":"102.220.160.24","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2026-08-13T19:01:53.355725Z","last_seen":"2026-08-13T19:01:53.355725Z","alert_count":2,"request_count":1,"received_data":56167,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jmc.ru.com/Zoom-Invite/","fqdn":"jmc.ru.com","domain":"jmc.ru.com","tld":"ru.com"},"ip":{"addr":"102.220.160.24","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8904a98700105a5e4f0284122eae6efa","sha1":"190fde9158c7bdc2ea3fcebefd618f6185afb511","sha256":"44f98c5cfb72c0b196d38e44147cfc9a81dcc7c2cbf581b3fe906ad582be9398","sha512":"e1251cfbda6068231a950b7df36346d2d364a8324b20e4afceea04422558ae1f24aa85ce758dad48ff2b2cf555231b0a0b61f47292da3adeee036e5766de81dc","ssdeep":"192:6w6lKkvRGZBmwxPTNKIOizo01c99eIeRVDi9YcFa0VC1oSKSi1:j6BQrOizvc99exVi9YcQVS","tlshash":"bc420a5eaea72a310673e0b897afa228f561400b4985cd103c5dc3c84f6d73d52beadd","size":12041,"data":"","first_seen":"2026-08-13T19:02:11.498034Z","last_seen":"2026-08-13T19:02:11.498034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"invite-zoommeeting.top/","fqdn":"invite-zoommeeting.top","domain":"invite-zoommeeting.top","tld":"top"},"ip":{"addr":"104.21.26.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T19:01:26.469Z","timestamp":1786647686469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invite-zoommeeting.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 12:39:16 GMT","end":"Mon, 09 Nov 2026 13:38:49 GMT"},"fingerprint":{"sha1":"39:8C:25:03:FB:9B:7B:FC:4B:E3:D6:D4:41:68:BF:3E:0D:6E:04:3D","sha256":"C2:31:4F:3D:72:64:89:AC:74:40:21:0C:0F:1C:9F:EF:16:1C:77:09:C2:3B:0B:D4:13:41:B1:2E:C7:AC:9A:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: invite-zoommeeting.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 13 Aug 2026 19:01:26 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://jmc.ru.com/Zoom-Invite/\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1qm11BDhgohqY6WlQuHj%2BM%2FEACOw06n9wC9Hfe8gbCfPqilhx6EfRJwZ0hW6%2BcjVkhYu1O6kvLKGd1OPev7xGIVW2JwQBS8uWgQwieFDfOetdnbHtUEZx2MfSQC%2FwHW3uA4pH3%2B%2FtY%2Fg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncf-ray: a2a9f7e8ed210daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T14:44:49.161829Z","times_seen":17975077,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":59,"connect":16,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmc.ru.com/Zoom-Invite/","fqdn":"jmc.ru.com","domain":"jmc.ru.com","tld":"ru.com"},"ip":{"addr":"102.220.160.24","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T19:01:26.607Z","timestamp":1786647686607,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmc.ru.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Jul 2026 23:32:52 GMT","end":"Tue, 27 Oct 2026 23:32:51 GMT"},"fingerprint":{"sha1":"89:06:41:05:26:B0:AB:A4:64:3F:AD:21:72:8A:F6:8B:82:B1:62:5E","sha256":"17:F3:53:62:2E:D9:23:E3:DA:C2:FD:84:EA:84:C8:9A:8A:1E:39:62:32:24:32:7A:D6:CA:B6:0F:08:3F:26:16"}}},"request":{"raw":"GET /Zoom-Invite/ HTTP/1.1\r\nHost: jmc.ru.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 13 Aug 2026 19:01:26 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 12 Aug 2026 02:41:43 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 55923\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":55923,"size_decoded":56167,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"8e03f5c10c17ec36abfcf8798a5a4ee5","sha1":"4daf2764eba6164605307dfe98f08264167495d0","sha256":"5e2b16874e2f5465c8fb3efcced49e84e89641037bce2a1762a28f1bc5814710","sha512":"3fdc3d0c1223c34a21d21a8b9f7f2bc5b7589d5c5dc77049d4ff9cca3ae92642e2e76ef0a994b2cacda8a3a9b58deedbdee3d2ec0aab03b3ea085178689327d4","ssdeep":"1536:42PMc8IO3gIIduOFM3MB7WSq79MEyYVm+a:4rfSLYVm+a","tlshash":"bc437319de841119a133d3b8dfa74319fa764013830282193faca3964fb6759da67fec","first_seen":"2026-08-13T19:02:11.49699Z","last_seen":"2026-08-13T19:02:11.49699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":90,"connect":40,"send":0,"wait":42,"receive":80,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"jmc.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"jmc.ru.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}