{"report_id":"123a9f7a-6630-443b-b10c-3b0b3609e66e","version":0,"status":"done","tags":[],"date":"2026-07-04T12:09:30Z","url":{"schema":"http","addr":"helpdesk-ledger-live-logincdn-us.vercel.app/","fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","domain":"helpdesk-ledger-live-logincdn-us.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"helpdesk-ledger-live-logincdn-us.vercel.app/","fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","domain":"helpdesk-ledger-live-logincdn-us.vercel.app","tld":"vercel.app"},"title":"Deployment Paused","dom":{"size":1638,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1638), with no line terminators","md5":"679879ea0b06fcd412b345dbbbbafb37","sha1":"59aadbb12420a1208ca0f6c26afb5cc163a7f78d","sha256":"4f18ca57432a2292ffdd57c0287cec6ee571ff0905f2c9745816442c3b9dac7d","sha512":"1772975f8378ba4869c0f7da3322acfd2c0a3b46ab5a53c353806eaaa18df666bfaa6638d5873a66544a8cec063daa04f37a9a0d58c431d5b5c83757e99c682f","ssdeep":"","tlshash":"4f31967755b1602ef33b8cfe34e633682244801bc0860e59b618f7b4e2d7ca64023384","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"2026-07-04T12:09:31.674993Z","last_seen":"2026-07-04T12:09:31.674993Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"helpdesk-ledger-live-logincdn-us.vercel.app/","fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","domain":"helpdesk-ledger-live-logincdn-us.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T12:09:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-06T19:02:21.283102Z","last_seen":"2026-05-06T19:02:21.283102Z","alert_count":6,"request_count":2,"received_data":2397,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"helpdesk-ledger-live-logincdn-us.vercel.app/","fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","domain":"helpdesk-ledger-live-logincdn-us.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T12:09:08.195Z","timestamp":1783166948195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: helpdesk-ledger-live-logincdn-us.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 04 Jul 2026 12:09:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::qpk2b-1783166948234-a099422f21c7\r\ncontent-length: 1592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1592,"size_decoded":1956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1592), with no line terminators","md5":"0a4b4c201404d2b39d368736659e3a2b","sha1":"d4ad0cce66cd313c6b26f8411a2c7d444fa8dee7","sha256":"d06a8a00a0c496b70c08390a7949fe4d2b520809a6e064123c2f66c92861cd8e","sha512":"9ac8fbb95d6c2efbeb856347081afb61407aa589a6d81eca6860b9df171ba29c224305aa82bc7a152849bed2552b144c25996d01bf4aadb6f34411f2358d1d7c","ssdeep":"","tlshash":"2d3174671575703ef23b88f934e6335462048027c0920f9af528fbb8e2c7da61133348","first_seen":"2026-07-04T12:09:31.683863Z","last_seen":"2026-07-04T12:09:31.683863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":10,"receive":10,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helpdesk-ledger-live-logincdn-us.vercel.app/favicon.ico","fqdn":"helpdesk-ledger-live-logincdn-us.vercel.app","domain":"helpdesk-ledger-live-logincdn-us.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helpdesk-ledger-live-logincdn-us.vercel.app/","date":"2026-07-04T12:09:08.478Z","timestamp":1783166948478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: helpdesk-ledger-live-logincdn-us.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://helpdesk-ledger-live-logincdn-us.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 04 Jul 2026 12:09:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::qpk2b-1783166948482-a234a446cdbf\r\ncontent-length: 78\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78,"size_decoded":441,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"998745e16037ee42319dd5dbc0315cdc","sha1":"5b1191e0578576b2707c49c80e8b2ff31316d2cc","sha256":"94d7acde318a8b0ddd5d3ee118232be427944539fcf1bf7fc3ec949fc48a9fef","sha512":"6571c51137c92429868d0b58178c006797b1e8954d1fd6fae2ed7d3c453750bab85ed8dbd0476d450739f11e10cfef1c108878347010e1da6600e6b9bebf012a","ssdeep":"","tlshash":"8da01257708e3009b2ae048048440404dac1d135815d950945c35033003487c0314860","first_seen":"2026-07-04T12:09:31.68722Z","last_seen":"2026-07-04T12:09:31.68722Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-04","alert":"Phishing Block","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"helpdesk-ledger-live-logincdn-us.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}