{"report_id":"21f06a2a-73c5-49f0-a8b8-b62cf048d1f1","version":6,"status":"done","tags":[],"date":"2026-05-27T00:07:04Z","url":{"schema":"https","addr":"ellipaldesktops.live/","fqdn":"ellipaldesktops.live","domain":"ellipaldesktops.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ellipaldesktops.live/","fqdn":"ellipaldesktops.live","domain":"ellipaldesktops.live","tld":"live"},"title":"Deployment Unavailable","dom":{"size":1636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1636), with no line terminators","md5":"920e450c8e32cdc15b6915fc5980d0a6","sha1":"9bc9a930954fa94537a9f88157a659caf5a6e89a","sha256":"2a8b666fe2fb730d9461602010e5b0b03ddcf7f1e84a51fafc52fb24565631ca","sha512":"601aed400cc6e80fe3a6a953c4a1488683b7eca14e989f55eaf30873fff279000c2dadd6f92bde70bf9571ad7caa25dcccb5f6b5725467227b464739f3d0c870","ssdeep":"","tlshash":"143154b745b1702ef3378cfd34e637646244951bc0960e59b518abf4e2c7ca65123685","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"2026-05-27T00:07:05.269164Z","last_seen":"2026-05-27T00:07:05.269164Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ellipaldesktops.live/","fqdn":"ellipaldesktops.live","domain":"ellipaldesktops.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:07:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ellipaldesktops.live","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-23T19:22:24.591759Z","last_seen":"2026-05-26T17:10:11.944915Z","alert_count":4,"request_count":2,"received_data":2429,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ellipaldesktops.live/","fqdn":"ellipaldesktops.live","domain":"ellipaldesktops.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:06:43.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellipaldesktops.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 19:06:13 GMT","end":"Mon, 17 Aug 2026 19:06:12 GMT"},"fingerprint":{"sha1":"27:76:B1:C3:18:C7:A2:C4:C7:57:3C:78:5D:E9:6B:27:5E:BD:DA:50","sha256":"7E:EA:CA:9A:D1:03:9A:67:DD:24:6E:64:53:E3:F4:E7:CC:CE:1D:CB:8A:A8:47:26:EC:AA:9B:8A:03:A0:80:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ellipaldesktops.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 27 May 2026 00:06:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::v7ghq-1779840403905-11ff438acd02\r\ncontent-length: 1590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590), with no line terminators","md5":"2dce9a8c40f02111911fb812647198d6","sha1":"928eed20778b5f4de9f8d8f24ebf8fc95886da97","sha256":"84d7edd65ac28156a588dbfc3537b6a3ca77d1954c1fe70db14070dc738e2dc2","sha512":"04bbb1ee16bb070637cbd5fcffaaa6d708aadf956052257c664b4722881c2ddd499578f3305e35c89016f03fe5ea554a32efca7ebbba2f3038f2af748e60e705","ssdeep":"","tlshash":"183142a705b1702ef33b88fd38e6376462049527c0920f95f918efb8e2c78a66533749","first_seen":"2026-05-27T00:07:05.272612Z","last_seen":"2026-05-27T00:07:05.272612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":530,"dns":507,"connect":1,"send":0,"wait":10,"receive":12,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ellipaldesktops.live/favicon.ico","fqdn":"ellipaldesktops.live","domain":"ellipaldesktops.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ellipaldesktops.live/","date":"2026-05-27T00:06:44.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ellipaldesktops.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 May 2026 19:06:13 GMT","end":"Mon, 17 Aug 2026 19:06:12 GMT"},"fingerprint":{"sha1":"27:76:B1:C3:18:C7:A2:C4:C7:57:3C:78:5D:E9:6B:27:5E:BD:DA:50","sha256":"7E:EA:CA:9A:D1:03:9A:67:DD:24:6E:64:53:E3:F4:E7:CC:CE:1D:CB:8A:A8:47:26:EC:AA:9B:8A:03:A0:80:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ellipaldesktops.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ellipaldesktops.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 27 May 2026 00:06:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::r8kst-1779840404093-0c6a114463b6\r\ncontent-length: 109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f25636515c05afa31a10164e8be2ec1c","sha1":"8c85daee2351fa5846f3560f1f32dd4dfbb9df3a","sha256":"70661cc2cc7b40a8c509c315f041f7b052e3cb666b377bd4d744c817b1542d7a","sha512":"daab8765367a84adba617915c6d5772372b1ac3178c2080131c41acfee7c55bfc115f1868b6445ca2170dddf58c8243d4f0b6828e20de0348bea75c536e26a96","ssdeep":"","tlshash":"ccb092b5386651c2a3ac0a8045102b916880e6fd7999c90051e29a3d265aba8e79a4a0","first_seen":"2026-05-27T00:07:05.275165Z","last_seen":"2026-05-27T00:07:05.275165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"ellipaldesktops.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}