{"report_id":"0413a2fd-3a8d-4278-b7b6-11489502958d","version":6,"status":"done","tags":[],"date":"2026-03-30T01:47:21Z","url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/web.html","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"title":"Exodus – Import Wallet","dom":{"size":51954,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2008)","md5":"a79791cd06c6199976c3dcc3e5cc4b2e","sha1":"4a7cbc852689a02ad702cd109f2f23729eea63c0","sha256":"ccaa618e467616259d0d90abb04c40e3a9f1b625d95e553083801ab2f9eee6db","sha512":"cb328a4aa28c608df90e4da9df5c38a2908589a8969effac1fb0f11fa7beb6cf8f81a34914655dc38d05392c595ca2aa23161092eee1524a870e189943eb1564","ssdeep":"768:8c36sZFmOFO1vnp4KTFLkCdGfWJ5ARHowbC0Nkd73LbrhDxB:d3/ZcAO1vBLkn9C0Nkd73LbrFxB","tlshash":"9a336179e657081304e390787fd706423b6581178705fd2e3b9c825c2fced6da9aab9c","dom_hash":"domhash2f04a23cc36ce2e3093e468484bc5ad5","first_seen":"2026-03-30T00:20:19.941671Z","last_seen":"2026-06-04T17:36:33.896252Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T01:47:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sso-exodus-backup-centre.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-30T00:20:15.842398Z","last_seen":"2026-03-30T00:20:15.842398Z","alert_count":14,"request_count":7,"received_data":381922,"sent_data":3488,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"57c1ffcaf6b218bdcb09ba57c2dac89a","sha1":"93182239748c3438675adde6de31122c8b8a53a0","sha256":"b83e5da945fc9e524fe7a32aa8ba24da79c71d433d50f8abd825e319ed2af8da","sha512":"bd62e855780513c11679ad77952f351c0fad2abac8994e3f409dd81cf40bed12b716d5fe555e68d084195421617a790c6c55b313ae9a0dd630373e4a0164bab3","ssdeep":"","tlshash":"3bf0e51a68930454099bad3656aa5084337580672c1fd951bc4c5549dfa1f065cbafec","size":479,"data":"","first_seen":"2025-10-10T08:05:39.896239Z","last_seen":"2026-05-29T00:43:19.519863Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/web.html","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fea0bedffbffa36296eafbfa0f01ac8","sha1":"2577977fc05d3ebddfebe1b4cbe689c41f62e0d1","sha256":"ad846188dde2a93c3dfb678366e30d537e0d8549dd612ee39df9254293553532","sha512":"25c535ea32a20982f273b3babe6a2918c21873a55ba051c700b4c15a84610fc555f63700252e2a674231d4c1c82be172f22d89840efe3f876811bd595b3af291","ssdeep":"768:Bp4KTFLkCdGfWJ5ARHowbC0Nkd73LbrhDxc:BBLkn9C0Nkd73LbrFxc","tlshash":"e3f22f3cf657081304e290697eca05427b64811b4745fd1e7b9c82582fdec2eb9abbed","size":37310,"data":"","first_seen":"2026-03-30T00:20:19.94844Z","last_seen":"2026-06-04T17:36:33.899984Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/web.html","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T01:47:01.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /web.html HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 5224\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"web.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 30 Mar 2026 01:47:01 GMT\r\netag: W/\"d50553e0e45085a9cdb5b0b188cb2ca2\"\r\nlast-modified: Mon, 30 Mar 2026 00:19:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pzmdp-1774835221353-afc4626056b2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50009,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (755)","md5":"0e276e0b5a5035e59c2b1eb70a13f61b","sha1":"04ea412be9c575f8a9c0bbade6eb99df69c2bb72","sha256":"15c2daf5ff47851def4acf46f7f655638a7049e5150b319eda9a5eaf6e3cbb91","sha512":"2f88db50e5e9fe957c785f8434888e4bbb2068054dd809bee47ff9727aadbd77aba4466f7d1033e88bf39aa641f78412a760c13548f5753e5f57c482bc75ccc1","ssdeep":"768:cc36sZFmOFOVp4KTFLkCdGfWJ5ARHowbC0Nkd73LbrhDxl:93/ZcAOVBLkn9C0Nkd73LbrFxl","tlshash":"d2235079e653081304e3a0797fd606423b6481174705fd2e3b9c92582fced6db9aabac","first_seen":"2026-03-30T00:20:19.942807Z","last_seen":"2026-06-04T17:36:33.8971Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/assets/logo.png","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso-exodus-backup-centre.vercel.app/web.html","date":"2026-03-30T01:47:01.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/web.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5226\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 30 Mar 2026 01:47:01 GMT\r\netag: \"a1e97b11beb28f83afa244aa3861e315\"\r\nlast-modified: Mon, 30 Mar 2026 00:19:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pzmdp-1774835221406-03ef1dcc434e\r\ncontent-length: 156905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3125 x 644, 8-bit/color RGBA, non-interlaced","md5":"a1e97b11beb28f83afa244aa3861e315","sha1":"eb1d5e5a7ec9383b37617bef8ac8b4ea2a5600a8","sha256":"62f4d680d05284115f257a91d99e5479276c5f8a2f350edfb3264d1b11b377a1","sha512":"3806ddde8a837baaa3ca8a69d4f16f5c8b92fe61e3c440d470f7a2e9915831d89f387970f6ba3dbbd84a54223e3af6d52d75b188cceeacd79a3d3b8d8f8eac71","ssdeep":"3072:7mkuTiZMrBsNHL+OLq0lkgRBQmZYGCxr4JooNNGa3Gt:6BTiZMrBYrPLtltROmCGe4+wNk","tlshash":"dde3127b85a7db15cddf00705b795f872b978c8b33b36d32567206aec8a7e500850a8e","first_seen":"2025-10-13T02:08:34.166674Z","last_seen":"2026-06-04T17:36:33.897726Z","times_seen":86,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/favicon.ico","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso-exodus-backup-centre.vercel.app/web.html","date":"2026-03-30T01:47:01.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/web.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 30 Mar 2026 01:47:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::pzmdp-1774835221432-f9e7fa746c41\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"94a3fc5c6af670b5762b74a7e6a3a13e","sha1":"693cb9840abf027b8a68658884c60529ea3f00a8","sha256":"6d47fd9df88bf92da7b68fd692699acc0ece0e2d05d5862b7a3bac6278ad2bac","sha512":"d11c756a2b21e5f1b378a701b18c5d02557a7b6b9ff2db2a9027e85cd42ea0f7444ad31f2f4edfedd8d62ad97fd00e4a96a0b06628e1e3e132995532da4b3920","ssdeep":"","tlshash":"7ba0112f0c8a8e0832c000002002aa3a80200222aebaeb2080caaa28e0000cea308280","first_seen":"2026-03-30T01:47:22.086379Z","last_seen":"2026-03-30T01:47:22.086379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T01:46:58.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 117771\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 30 Mar 2026 01:46:58 GMT\r\netag: W/\"cce61a4a647fce172f83a65e0008215a\"\r\nlast-modified: Sat, 28 Mar 2026 17:04:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rkbkp-1774835218757-ce757ec3b8e0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12208,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (793)","md5":"cce61a4a647fce172f83a65e0008215a","sha1":"65e727cbafde7b85d9a408b30b3289f07b756518","sha256":"7aeb599ef447b3942d5c083b4f8cdc32380efc272f370912b81ec69f3046f1d5","sha512":"3f94dd53af9bf7e83f841be1f14bcc5a5fbfabf16cef25c32e5e3dbb066c2dfbb0c79d1ace50db3f7150434b7fa7c22a2b9456cb2d6af3b0184c0126777b0e1a","ssdeep":"192:rcYUaZzTKBq/Ii3mwd/7vwHnUBoZ3XFkMryVTMQExumaJqcOAp/mRkob0gkFMzU3:r6F2gz5TiCOZyWILE","tlshash":"1642f05b5aa31211ac57e8b96ffa170973a5c407d00ecc687edc224ccf8aad59dd238c","first_seen":"2025-10-13T02:08:34.162958Z","last_seen":"2026-05-29T00:43:19.514752Z","times_seen":65,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":45,"dns":20,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/assets/logo.png","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso-exodus-backup-centre.vercel.app/","date":"2026-03-30T01:46:59.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5224\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 30 Mar 2026 01:46:59 GMT\r\netag: \"a1e97b11beb28f83afa244aa3861e315\"\r\nlast-modified: Mon, 30 Mar 2026 00:19:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rkbkp-1774835219083-44336b3d6671\r\ncontent-length: 156905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3125 x 644, 8-bit/color RGBA, non-interlaced","md5":"a1e97b11beb28f83afa244aa3861e315","sha1":"eb1d5e5a7ec9383b37617bef8ac8b4ea2a5600a8","sha256":"62f4d680d05284115f257a91d99e5479276c5f8a2f350edfb3264d1b11b377a1","sha512":"3806ddde8a837baaa3ca8a69d4f16f5c8b92fe61e3c440d470f7a2e9915831d89f387970f6ba3dbbd84a54223e3af6d52d75b188cceeacd79a3d3b8d8f8eac71","ssdeep":"3072:7mkuTiZMrBsNHL+OLq0lkgRBQmZYGCxr4JooNNGa3Gt:6BTiZMrBYrPLtltROmCGe4+wNk","tlshash":"dde3127b85a7db15cddf00705b795f872b978c8b33b36d32567206aec8a7e500850a8e","first_seen":"2025-10-13T02:08:34.166674Z","last_seen":"2026-06-04T17:36:33.897726Z","times_seen":86,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/assets/logoexo.svg","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso-exodus-backup-centre.vercel.app/","date":"2026-03-30T01:46:59.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /assets/logoexo.svg HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 3277\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logoexo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 30 Mar 2026 01:46:59 GMT\r\netag: W/\"1a62c84f251c8d224483a78878e673df\"\r\nlast-modified: Mon, 30 Mar 2026 00:52:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2kfph-1774835219078-f6a0b618d216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1a62c84f251c8d224483a78878e673df","sha1":"a89603b1b0c5c653a17f8a0c1fe2e64b4f879ec6","sha256":"f3aacd4a1ab60e14b1d638f144960a808a31bd8aae073d531bc7305639b30cd0","sha512":"3879b6e68a3ba13ced412130dbe388230d6d6e52ec40e02850aeb829992c11bcf99dcfdfc5d5e2f100b0ea284c63bd7e1695245f7f0351c4478bf8db41bfd0e5","ssdeep":"","tlshash":"0341cc3ef63aec17e714e6dcfd544439914b81f2c9c14221c2a1bf9a25159c21e2ebe7","first_seen":"2025-04-18T11:22:59.804264Z","last_seen":"2026-06-20T23:11:12.773563Z","times_seen":127,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso-exodus-backup-centre.vercel.app/favicon.ico","fqdn":"sso-exodus-backup-centre.vercel.app","domain":"sso-exodus-backup-centre.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso-exodus-backup-centre.vercel.app/","date":"2026-03-30T01:46:59.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sso-exodus-backup-centre.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso-exodus-backup-centre.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Mon, 30 Mar 2026 01:46:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::rkbkp-1774835219119-2593b9202929\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"20a3e5a0c78c1fc8e06f9778088d18c8","sha1":"76019ebece6717f7de963669079a38c622a64e6b","sha256":"ab7be044d3bb23e180cb36165b3528769f070cb955c646f95fd029c9c8bb1d66","sha512":"92633f361c1245e1fb3c477f4769e8780694c36d196bf990e912cd1f636f7873ca36d65574e40a0019c49c533392a681f4ed614845c3f0a04e3a0652bff63f46","ssdeep":"","tlshash":"b1a0241d04c40cdcf3dc001031430375d03404115dd3f17010cd311070cc0cd7344040","first_seen":"2026-03-30T01:47:22.089372Z","last_seen":"2026-03-30T01:47:22.089372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"sso-exodus-backup-centre.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}