{"report_id":"b7acb57e-a7ec-4eb4-af06-7c1ae7815516","version":6,"status":"done","tags":[],"date":"2026-05-10T07:33:36Z","url":{"schema":"https","addr":"login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html","fqdn":"login-ledgger-load-io-queue.vercel.app","domain":"login-ledgger-load-io-queue.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html","fqdn":"login-ledgger-load-io-queue.vercel.app","domain":"login-ledgger-load-io-queue.vercel.app","tld":"vercel.app"},"title":"Deployment Paused","dom":{"size":1638,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1638), with no line terminators","md5":"099352d8a76699b10f30e65d11e37bef","sha1":"8af0ae29f322045fff7a44a427f14b0959d3d9fd","sha256":"52fb32728e316ee533f9f621a7994ca74bd65e3b5c3a0bc47b6a9fb45af4977c","sha512":"3cb2c97cd7ea7497b9b9badd5f13a04f731e68a4b9d4341a69bb253692c5eb378bfde1943004734bef478b4c5b8d5f72f24b42d1261044bf68fdbabed6e45de6","ssdeep":"","tlshash":"3e31767755b1602df33b8cfe34e673642244851bc0960e59b618f7b4e2d7ca65123345","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"2026-05-10T07:33:37.192339Z","last_seen":"2026-05-10T07:33:37.192339Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html","fqdn":"login-ledgger-load-io-queue.vercel.app","domain":"login-ledgger-load-io-queue.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T07:33:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"login-ledgger-load-io-queue.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-09T02:05:52.071817Z","last_seen":"2026-05-09T02:05:52.071817Z","alert_count":6,"request_count":2,"received_data":2429,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html","fqdn":"login-ledgger-load-io-queue.vercel.app","domain":"login-ledgger-load-io-queue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T07:33:14.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /ledger%20form/device.html HTTP/1.1\r\nHost: login-ledgger-load-io-queue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 Payment Required\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 10 May 2026 07:33:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::dvsxg-1778398394639-ee003f353bea\r\ncontent-length: 1592\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1592), with no line terminators","md5":"bb1c38403ec9589102d8e3cd80340379","sha1":"56233c0a741e2a52a11dec0a08aafb6d69db6555","sha256":"23a872d983c952a3010c8670997a8a63a34063e6194b41c98d77fd6ea39f962d","sha512":"f3cf49aec7e18147df46f06ef04110bc08f090b153fe1e8fba3185ba27193cf4b2099502d85866fbc2239d4f5352099707f3370650275f0821ca2422f1a0109d","ssdeep":"","tlshash":"8531446715b1702df23b88f934d6375422048526c0921f95f518ebb8e2c7da65133749","first_seen":"2026-05-10T07:33:37.199219Z","last_seen":"2026-05-10T07:33:37.199219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":58,"dns":33,"connect":1,"send":0,"wait":11,"receive":10,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-ledgger-load-io-queue.vercel.app/favicon.ico","fqdn":"login-ledgger-load-io-queue.vercel.app","domain":"login-ledgger-load-io-queue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html","date":"2026-05-10T07:33:14.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: login-ledgger-load-io-queue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-ledgger-load-io-queue.vercel.app/ledger%20form/device.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 402 Payment Required\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sun, 10 May 2026 07:33:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::spzxb-1778398394935-10023639a6d6\r\ncontent-length: 78\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"402","status_text":"Payment Required","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":78,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"aa73a65e3cf136cec9eb7458bf7266e7","sha1":"a358954087db987eee06ce7df5106b0e0e7b8f83","sha256":"7463f6dfdd3a9c1bce0e4742ac4e804dcb5814a7719324fff7975de3b6e3312b","sha512":"6f53e6171d8f56b4e9c0f807a3734f5ef2ad1634f5f56d1fa862460d5cbdab02972b50b76001e83952c957b6148e71ee65f5595f72915c81f925416f91c8853f","ssdeep":"","tlshash":"13a01296248a2045716e00c74040220479c0d2641584440942e289621030434934c820","first_seen":"2026-05-10T07:33:37.202058Z","last_seen":"2026-05-10T07:33:37.202058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"login-ledgger-load-io-queue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}