{"report_id":"3cea190f-aba6-494f-81f3-2a67d14abda4","version":6,"status":"done","tags":[],"date":"2026-02-14T02:29:55Z","url":{"schema":"https","addr":"flexadesktop.com/","fqdn":"flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.flexadesktop.com/","fqdn":"www.flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"title":"Flexa Desktop App","dom":{"size":1626907,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (34776)","md5":"ed772a5c59d9e90a73330f51712d764d","sha1":"a14743adee08e4a211c20c00b20bdeeff0678770","sha256":"264d5271802347e3d6660ecce04ada210b537e68b5b6947ca857f43d4230b8b4","sha512":"cb9041f466d5bf84e82b21b3760c2044fce9382e838dd0f099918a5c44866d55f3abe02accbfb635c7a86de43ff63685a034622f524aa95efdd2114559aebcb6","ssdeep":"24576:0BqEeW5AoNbEeW5ACBQEeW5A4d5EeW5AeJuEeW5AHrsZ:0BqEsoNbEsCBQEs4d5EseJuEsHrsZ","tlshash":"5175127824ac153f2c57c5d4e3d8372d9e28b693d81682ed3b8d05a25fc6ec59933a8c","dom_hash":"domhashf76aefa304e49cda7653e264dbc6d750","first_seen":"2026-02-14T02:29:56.824397Z","last_seen":"2026-02-14T02:29:56.824397Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"flexadesktop.com/","fqdn":"flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:29:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.flexadesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"flexadesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.flexadesktop.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-12T21:40:26.330431Z","last_seen":"2026-02-12T21:40:26.330431Z","alert_count":1,"request_count":1,"received_data":1627339,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-02-09T04:33:07.619159Z","alert_count":0,"request_count":1,"received_data":99997,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-02-11T13:14:05.285466Z","alert_count":0,"request_count":1,"received_data":2929,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-02-09T07:58:09.555546Z","alert_count":0,"request_count":2,"received_data":581,"sent_data":1147,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flexadesktop.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-12T21:40:26.327735Z","last_seen":"2026-02-12T21:40:26.327735Z","alert_count":1,"request_count":1,"received_data":1627131,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19261174\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.flexadesktop.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__t0yrr2m03wc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cb8724bfd08fe4da50727bb8ae35b84","sha1":"3f9aebb1c711871ad77162899490826c9c79fbba","sha256":"e8ad305f98dd3ff14a2830bb3685de00c7185545a177d92af6ae9b1dff32eb57","sha512":"2d271352de574e4f24b4f3ab57ffb7d34c28d294c61cf4d8837b6a8c842e037a73131047c96ccb0e7f9b80dfe952778239b53260d69e521bf0700719466138ff","ssdeep":"","tlshash":"b1b02b72fb1040701540e2134508214628500184100c252cb054354840066c82299713","size":126,"data":"","first_seen":"2026-02-14T02:29:56.835847Z","last_seen":"2026-02-14T02:29:56.835847Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.flexadesktop.com/","fqdn":"www.flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd1404a9b1d62a52a0323b2edbd18efd","sha1":"d95fe392784879b7c656208a6864603ecd1d5fdc","sha256":"ed4715a76274f190a40fe70440f355ae8e6b94ce6f7cd58065a54d0291f2b74b","sha512":"ad0a6d5c718cca5269e0e852086aa3afe358ac7c67273dc24c10a17cc8db1b9129e1d3d77bf268705984804fdd20b98b0a3fbf7be3043e0395c1be3fdd38d903","ssdeep":"","tlshash":"13113626222233607ce9d5dca9b6d98a39bb501be40a0090b09e944d2f34b8944f7bec","size":895,"data":"","first_seen":"2023-05-29T15:47:40Z","last_seen":"2026-06-04T15:11:43.256926Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.flexadesktop.com/","fqdn":"www.flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8aa50e9a4908184171dd545a90dca206","sha1":"0d2df7c71f1b62a7c27f9cf87c83119b8b6e42e8","sha256":"1e4a9a04b2853aebd77a94a4ba996b6fe32f8b1650b47b0c1892bff0c0759699","sha512":"0045672e25b5f5cb6606b74ea7eab16510d115db0b7695c216078d83386e48955d0d4a60d9bb09ffa22ed21f4dcb91930957d1aa212ec57700e51fe6ad35e23a","ssdeep":"","tlshash":"66011289fc42b07696963228763bfa07516312261884a4336efdc36fef32d87811368c","size":844,"data":"","first_seen":"2025-11-17T18:18:51.364238Z","last_seen":"2026-04-21T09:04:44.406809Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91fb4d36bcc15b5911e676da812d80e","sha1":"544f4e1c87bd2c60dc63cae161986122496c1ede","sha256":"befc9be725b835e63b35f5c1d708f239d48cd8d23b1d430452286f997df06ada","sha512":"3d1a6360df99446aa092f9aca39582dca0c92babb32f4a796adbae56862d2739590aa54f7a01d612f18f27220dfdb213c13f2024b39cf70f688b89eefc2841be","ssdeep":"1536:EnCBo5ri/D4ivMPcYYbey4UjnzUSwppTPiD16on49d:ECBo5u/cJzy4Wn7p6I43","tlshash":"c6a339da7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","size":99247,"data":"","first_seen":"2026-02-13T09:22:56.43592Z","last_seen":"2026-02-16T10:34:18.024192Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19261174/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.flexadesktop.com/","fqdn":"www.flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:29:32.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flexadesktop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 11:12:05 GMT","end":"Thu, 07 May 2026 11:12:04 GMT"},"fingerprint":{"sha1":"C2:36:2A:50:9A:E2:B2:41:90:80:B9:DB:C5:3D:59:F8:29:90:C4:F6","sha256":"A2:D8:EB:07:C1:2E:CD:98:F6:D8:52:24:1B:64:97:56:52:22:0A:0F:02:D2:BD:FD:1B:2E:05:08:9E:F4:FD:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.flexadesktop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 92262\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 02:29:32 GMT\r\netag: \"b6f7e8d60f3203285c9237022eae5cfd\"\r\nlast-modified: Fri, 13 Feb 2026 00:51:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lrqvk-1771036172539-0d5f2e63db5e\r\ncontent-length: 250231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1626810,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (34776)","md5":"0a865b1eb1f395165fdb0bfd2236b2b5","sha1":"f2e42254b6be30753ca56f006cbc39897f0cf4f0","sha256":"3e3996f3af6c0f0422f7a448b926d2ee81fa66af50f1c61711375b6417c1491e","sha512":"a5db3d0e44a50e92102ec799e3dafed556fe74fe39515dad3f7c3ead164bb5087340f8bf1babefa256c5eeeb3f8c5c8704481687ea26b737e453b14f023e60ac","ssdeep":"12288:yVyvbYBhreW22fWVW5ATVyvJXBVreWP2fWVW5A8VyvbCBhreWk2fWVW5AxVyvlh3:CBqEeW5AoNbEeW5ACBQEeW5A4F","tlshash":"8e2523b5146d146f28958c85e2542b2edf6d3f63a841c2ee3fdd1ac36bccc48d912a8d","first_seen":"2026-02-12T21:40:31.045878Z","last_seen":"2026-02-14T02:29:56.828397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":10,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.flexadesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.241","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.flexadesktop.com/","date":"2026-02-14T02:29:32.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.flexadesktop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XKNrndagMOEtsu3EJDmxYsvTU3MBsBt7sG19L5he4Cu86HdeoFEjvPD7SfNuREuIqDSDRRfNgQ8sVptg\r\nlast-modified: Fri, 13 Feb 2026 09:21:56 GMT\r\nx-goog-generation: 1770974516435725\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 99247\r\nx-goog-hash: crc32c=CPqDKA==, md5=uR+002vMFbWRHmdtqBLYDg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 32221\r\ncache-control: public, max-age=28800\r\nexpires: Sat, 14 Feb 2026 10:29:32 GMT\r\ndate: Sat, 14 Feb 2026 02:29:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":99247,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b91fb4d36bcc15b5911e676da812d80e","sha1":"544f4e1c87bd2c60dc63cae161986122496c1ede","sha256":"befc9be725b835e63b35f5c1d708f239d48cd8d23b1d430452286f997df06ada","sha512":"3d1a6360df99446aa092f9aca39582dca0c92babb32f4a796adbae56862d2739590aa54f7a01d612f18f27220dfdb213c13f2024b39cf70f688b89eefc2841be","ssdeep":"1536:EnCBo5ri/D4ivMPcYYbey4UjnzUSwppTPiD16on49d:ECBo5u/cJzy4Wn7p6I43","tlshash":"c6a339da7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","first_seen":"2026-02-13T09:22:56.43592Z","last_seen":"2026-02-16T10:34:18.024192Z","times_seen":164,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":86,"dns":71,"connect":1,"send":0,"wait":2,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Lkk9RwQyppDCX4UQnv3Q0QUnm3g.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.flexadesktop.com/","date":"2026-02-14T02:29:33.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/Lkk9RwQyppDCX4UQnv3Q0QUnm3g.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.flexadesktop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Tue, 20 Jan 2026 15:19:27 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-696f9cff-730526932db06c8826457336;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 1c9505b9-8346-4148-9334-19133c8cac1f\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"648710757672c5c42ed2d0ce3d829656\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: WfwS1MyeiyrOR4fHNEAJSMK4nq31ArvDZOUusECGLBoG-KJ_c9maIA==\r\nage: 2113806\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"WfwS1MyeiyrOR4fHNEAJSMK4nq31ArvDZOUusECGLBoG-KJ_c9maIA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1659,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"648710757672c5c42ed2d0ce3d829656","sha1":"3b32902d47d406fed06c10e272bec64bcad24f1b","sha256":"636a05a69b97e8f02df3f91a9651285cd67b2d0e8d5929183090b22bc2c47826","sha512":"9b23d3fbeb95062d4cf86324faa9136e3d3f72c53a4858fa16955710c46e9e4c33f9498a15100457b0bf641332b07864c07d65b059591dafb23aeecb663faffd","ssdeep":"","tlshash":"8031e82326b43d21d8ec03b821af8506577051188673b2916682b58ccdb97a2daaac3a","first_seen":"2026-02-12T21:40:31.049741Z","last_seen":"2026-02-14T02:29:56.832123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":22,"connect":1,"send":0,"wait":4,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19261174/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.flexadesktop.com/","date":"2026-02-14T02:29:33.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/19261174/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.flexadesktop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: 9e55bf82821dd5f6d0d12ed13b013b0d:a494b6dacf6060dd:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 14 Feb 2026 02:29:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-08-05T22:39:31.440318Z","times_seen":28115,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":77,"dns":55,"connect":1,"send":0,"wait":129,"receive":6,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19261174\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.flexadesktop.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__t0yrr2m03wc","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.11","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.flexadesktop.com/","date":"2026-02-14T02:29:33.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19261174\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fwww.flexadesktop.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__t0yrr2m03wc HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.flexadesktop.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Sat, 14 Feb 2026 02:29:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6cb8724bfd08fe4da50727bb8ae35b84","sha1":"3f9aebb1c711871ad77162899490826c9c79fbba","sha256":"e8ad305f98dd3ff14a2830bb3685de00c7185545a177d92af6ae9b1dff32eb57","sha512":"2d271352de574e4f24b4f3ab57ffb7d34c28d294c61cf4d8837b6a8c842e037a73131047c96ccb0e7f9b80dfe952778239b53260d69e521bf0700719466138ff","ssdeep":"","tlshash":"b1b02b72fb1040701540e2134508214628500184100c252cb054354840066c82299713","first_seen":"2026-02-14T02:29:56.835847Z","last_seen":"2026-02-14T02:29:56.835847Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flexadesktop.com/","fqdn":"flexadesktop.com","domain":"flexadesktop.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:29:32.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flexadesktop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 11:12:05 GMT","end":"Thu, 07 May 2026 11:12:04 GMT"},"fingerprint":{"sha1":"C2:36:2A:50:9A:E2:B2:41:90:80:B9:DB:C5:3D:59:F8:29:90:C4:F6","sha256":"A2:D8:EB:07:C1:2E:CD:98:F6:D8:52:24:1B:64:97:56:52:22:0A:0F:02:D2:BD:FD:1B:2E:05:08:9E:F4:FD:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: flexadesktop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sat, 14 Feb 2026 02:29:32 GMT\r\nlocation: https://www.flexadesktop.com/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::q7vbt-1771036172468-53bb58574dd6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1626810,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":57,"dns":35,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"flexadesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}