{"report_id":"2e018800-2a4d-4a6b-b5b5-7fd8b761a83c","version":6,"status":"done","tags":[],"date":"2026-04-15T17:43:36Z","url":{"schema":"http","addr":"ledgerdesktop.live/","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ledgerdesktop.live/","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"title":"404: NOT_FOUND","dom":{"size":3834,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3432)","md5":"4e5bddc87b1adfecc936d45c1f6eb2a9","sha1":"c158c1f7b069a23d5574c0bf585f8e1e2a78fa09","sha256":"4a274500f5257f6daa55569e68dbca0b03b67e9b6eb0be179d74e56687528f2a","sha512":"5940f5f7faf73d5d586f3045e341f28515c44305573d05200e54e99d1aebf8ea08075cc1e624d0db80ea3df69661b869eb988c5dc7bc5dd94d996cfaa8d0ada7","ssdeep":"","tlshash":"568193377b69211af333c89fa1c26b993000a121c1abdab9ff579f15d5ca1651e0278c","dom_hash":"domhash31a19887ab60b039e33ca13a230f9f62","first_seen":"2026-04-15T17:43:37.741597Z","last_seen":"2026-04-15T17:43:37.741597Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgerdesktop.live/","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-20T17:43:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"ledgerdesktop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgerdesktop.live","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-15T06:01:52.903672Z","last_seen":"2026-04-15T06:01:55.663355Z","alert_count":3,"request_count":3,"received_data":8711,"sent_data":1417,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgerdesktop.live/","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T17:43:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerdesktop.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 13:31:57 GMT","end":"Wed, 13 May 2026 13:31:56 GMT"},"fingerprint":{"sha1":"C5:EF:23:1C:C5:6C:DF:D1:CA:23:EF:C8:25:83:73:6F:B6:C7:1B:75","sha256":"F9:51:47:80:28:A8:FE:11:4C:E5:D6:10:28:05:C8:1B:C9:91:26:8B:3E:71:59:E3:CE:93:C9:02:A6:F6:AE:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgerdesktop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Apr 2026 17:43:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_NOT_FOUND\r\nx-vercel-id: arn1::xv8kf-1776274989866-c570d8d20b2a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3783,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3412)","md5":"c03dd638c8df75bae6f8bc42118cfbbc","sha1":"afdfdc602ec935623cdc989d1037da8db1a7bf76","sha256":"7c015f2c8dfbea6fa625857b338ba9c9f10f856c55de4804f91099cd93dd46a9","sha512":"4b84882324659d10db6779dc597f90fcccb09b38201ae0828fd4066f4bfb8767741dbaa702d52b295c74cc5f48ab7a11fa0a124e45fad65fea4af3a5a2cef505","ssdeep":"","tlshash":"a87163377b69211af333c85fa1c26b893010a221d1bb9ab8ff579f25d5ca1651e1278c","first_seen":"2026-04-15T17:43:37.743064Z","last_seen":"2026-04-15T17:43:37.743064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":42,"dns":9,"connect":2,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"ledgerdesktop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerdesktop.live/","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-15T17:43:09.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerdesktop.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 13:31:57 GMT","end":"Wed, 13 May 2026 13:31:56 GMT"},"fingerprint":{"sha1":"C5:EF:23:1C:C5:6C:DF:D1:CA:23:EF:C8:25:83:73:6F:B6:C7:1B:75","sha256":"F9:51:47:80:28:A8:FE:11:4C:E5:D6:10:28:05:C8:1B:C9:91:26:8B:3E:71:59:E3:CE:93:C9:02:A6:F6:AE:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgerdesktop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 15 Apr 2026 17:43:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_NOT_FOUND\r\nx-vercel-id: arn1::zfxgl-1776274989968-f5926f87413f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3783,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3412)","md5":"36d74922d555c7d851d7aac87e0e2594","sha1":"c732186709c1ba382154de5c9d202bc3f616c48f","sha256":"825e1e9ac329d56a96cbb029a6a42637a8f3b9cac4f4900ade944a2e06108592","sha512":"579482c4c3590b02d21c81f9a6dea042ba1f15c5d598e83b622e6a4c84697ebc5231cce66fe6fe637c16286c80772d83985086d5ae6f245353fedd50474e8c8a","ssdeep":"","tlshash":"a17173377b6c211af333c85fa1c26b893000a121d1bb9ab9ff579f25d5ca1651e1278c","first_seen":"2026-04-15T17:43:37.743923Z","last_seen":"2026-04-15T17:43:37.743923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"ledgerdesktop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerdesktop.live/favicon.ico","fqdn":"ledgerdesktop.live","domain":"ledgerdesktop.live","tld":"live"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerdesktop.live/","date":"2026-04-15T17:43:10.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerdesktop.live","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 13:31:57 GMT","end":"Wed, 13 May 2026 13:31:56 GMT"},"fingerprint":{"sha1":"C5:EF:23:1C:C5:6C:DF:D1:CA:23:EF:C8:25:83:73:6F:B6:C7:1B:75","sha256":"F9:51:47:80:28:A8:FE:11:4C:E5:D6:10:28:05:C8:1B:C9:91:26:8B:3E:71:59:E3:CE:93:C9:02:A6:F6:AE:88"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledgerdesktop.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerdesktop.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 15 Apr 2026 17:43:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_NOT_FOUND\r\nx-vercel-id: arn1::6hngz-1776274990144-3b36c959147e\r\ncontent-length: 107\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1442ca8deb25659330922befda004811","sha1":"9074b77464f7c05862773c6644841275d4d17627","sha256":"0fd04c1290e9bc7a23de12f7689876c6bf3d2a7e965eed40b556e9009ddc5a2f","sha512":"964337e8e03714285598991e8739fca12272fcc277a9734c3061077b6224b811832eff31955c4d6b829eb2b6d551ebd089b96ed5fbc6c7f7c66d2672f31a909f","ssdeep":"","tlshash":"a6b0120f10ca3dc930dac8216591772b799453b0f968e930d2ea95ad3904948f301055","first_seen":"2026-04-15T17:43:37.744785Z","last_seen":"2026-04-15T17:43:37.744785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-15","alert":"Sinkholed","trigger":"ledgerdesktop.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}