{"report_id":"e23280ad-75a8-4151-a4e8-af0a9985c82b","version":6,"status":"done","tags":[],"date":"2026-05-27T01:50:38Z","url":{"schema":"https","addr":"zebecdesktop.com/","fqdn":"zebecdesktop.com","domain":"zebecdesktop.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"zebecdesktop.com/","fqdn":"zebecdesktop.com","domain":"zebecdesktop.com","tld":"com"},"title":"Deployment Unavailable","dom":{"size":1636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1636), with no line terminators","md5":"98137cabd194c863975a0c5758ed14a9","sha1":"8edb486d1ae1232856e88e587e5eb23a876a7a5b","sha256":"02d50a359ecc0e073a03bc8e491875d8e618985114ad379d66e19a8399c4cfda","sha512":"b8ab52bcc1fa4f8eb252d604a381ad646bc51843dece4cb2765103ba8b0116f14e911d47b6afd0616b418f9aa0e761e6ab8bf0d4003b0aa37cc4dfc0ace5758c","ssdeep":"","tlshash":"363152b745b1702ef23b8cfe34e637687244851bc0960e99b618abf8e2c7ca75123645","dom_hash":"domhashec6cdb565b8b0f77c754672472fa9910","first_seen":"2026-05-27T01:50:39.356497Z","last_seen":"2026-05-27T01:50:39.356497Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zebecdesktop.com/","fqdn":"zebecdesktop.com","domain":"zebecdesktop.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:50:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zebecdesktop.com","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-13T04:17:18.952927Z","last_seen":"2026-05-26T18:56:25.757766Z","alert_count":4,"request_count":2,"received_data":2429,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zebecdesktop.com/","fqdn":"zebecdesktop.com","domain":"zebecdesktop.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:50:16.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebecdesktop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 16:37:25 GMT","end":"Tue, 04 Aug 2026 16:37:24 GMT"},"fingerprint":{"sha1":"FD:D2:7C:62:EB:25:38:30:61:08:A1:9B:54:CB:FA:4E:B9:A5:C2:E3","sha256":"FB:C0:7D:32:25:32:B0:5B:1B:5C:1C:5B:E2:EF:05:EC:C7:A3:3D:7E:DD:EF:B8:47:D9:21:75:E1:46:AB:81:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zebecdesktop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 27 May 2026 01:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::6wzbz-1779846616517-1fbeae7890b5\r\ncontent-length: 1590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1590,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590), with no line terminators","md5":"352d33acd4a42f41ca4d96a50139ecea","sha1":"109b02f556058e97c95ae22b9d81a787d5067add","sha256":"374b567e61b955041a59b9beab446fe0fbbc6a8d239d5895a2e860822b3d8023","sha512":"e6bed56bb20db03f4aa528b8a7d509aab61ed64a296db4f6f8d85a1652bed70458ee1465b300cd0d45f2544aa8e76d72c8949945af7869c8524a2005cd825381","ssdeep":"","tlshash":"643142a705b1702ef23b8cfd34d637547208c526c0920f99fa18efb8e2c78a66533649","first_seen":"2026-05-27T01:50:39.357443Z","last_seen":"2026-05-27T01:50:39.357443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":162,"dns":67,"connect":33,"send":0,"wait":42,"receive":11,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zebecdesktop.com/favicon.ico","fqdn":"zebecdesktop.com","domain":"zebecdesktop.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zebecdesktop.com/","date":"2026-05-27T01:50:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zebecdesktop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 16:37:25 GMT","end":"Tue, 04 Aug 2026 16:37:24 GMT"},"fingerprint":{"sha1":"FD:D2:7C:62:EB:25:38:30:61:08:A1:9B:54:CB:FA:4E:B9:A5:C2:E3","sha256":"FB:C0:7D:32:25:32:B0:5B:1B:5C:1C:5B:E2:EF:05:EC:C7:A3:3D:7E:DD:EF:B8:47:D9:21:75:E1:46:AB:81:8A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zebecdesktop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zebecdesktop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 27 May 2026 01:50:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: DEPLOYMENT_DISABLED\r\nx-vercel-id: arn1::x4fcr-1779846616713-97d386e11eaf\r\ncontent-length: 109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"61291c69764f2ae295b1f5953c967e29","sha1":"05ae318a33c9844b8c38b884747c1f1b3253d1be","sha256":"7772dbe23b50b6388af8a4c6886f9e7dd79f565fc76eba914876fb77be305dbc","sha512":"e4687feb8a67f7cfc4aaa75a2a4a09cfa26a2550da0e08cb1c24573276f68638b3aad36d522cd33bfc7215e43f48f91ba3e1ce6f34a3b11f73152a2fbf0c1e3d","ssdeep":"","tlshash":"8eb022b8bc3828c2b3b88b800c303c002800c283b02ca208a2c2cc3c228e288c3ce0f0","first_seen":"2026-05-27T01:50:39.358248Z","last_seen":"2026-05-27T01:50:39.358248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"zebecdesktop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}