{"report_id":"ebee76d8-c72e-499f-96c4-759dbce4166f","version":0,"status":"done","tags":[],"date":"2026-06-23T23:42:36Z","url":{"schema":"http","addr":"1inch-docs.vercel.app/","fqdn":"1inch-docs.vercel.app","domain":"1inch-docs.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"1inch-docs.vercel.app/","fqdn":"1inch-docs.vercel.app","domain":"1inch-docs.vercel.app","tld":"vercel.app"},"title":"Notice of DMCA Takedown","dom":{"size":3593,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3254)","md5":"affeee06100a6a0356da047f05381826","sha1":"24fad1ea18a9c153535aa669da6f9f82b1db6e5b","sha256":"8e6edd9d27a678b8fc24414a43837205bfec2b9d94d29d6f5a141d0a9c12fb83","sha512":"4c98ae380550368b6bf8c381dca3c2b8b39d33db6923eee42df3801d80c13ba36cbe0990bedd4b8aa84dc8b54e1f3ff4d9d65ba4c5446cc365a2cc978105ceb7","ssdeep":"","tlshash":"14710b3fe3f3b27ee10b8eb965e0715431117077da02c6a8ea849b74e2cb89e9431744","dom_hash":"domhash72179a5c499f43c4ec118d917a29c701","first_seen":"2026-02-13T23:33:09.581912Z","last_seen":"2026-07-06T00:34:40.46573Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1inch-docs.vercel.app/","fqdn":"1inch-docs.vercel.app","domain":"1inch-docs.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T23:42:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"1inch-docs.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-09-03T14:32:23.883951Z","last_seen":"2025-09-03T14:32:23.883951Z","alert_count":4,"request_count":2,"received_data":4380,"sent_data":1008,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1inch-docs.vercel.app/","fqdn":"1inch-docs.vercel.app","domain":"1inch-docs.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T23:42:13.330Z","timestamp":1782258133330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1inch-docs.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 23 Jun 2026 23:42:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DMCA_TAKEDOWN\r\nx-vercel-id: arn1::cxkpg-1782258133385-75a29f68405b\r\ncontent-length: 3561\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3561,"size_decoded":3919,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2064)","md5":"bb07f578534fbf5a9d8f401bb76dee9e","sha1":"707b93b37a44247dd9a035af280159c414ebb2b4","sha256":"ee1d271ce759c30f835b78ba7dbe0286124d8fb4e65bb519278873a2c23a4d52","sha512":"55550a2672cf6922c3fd8298c67eb5521b5b90cce29cf138ae34320bc0c91cb2c7b403f98d00c3d04007ab6744e54e7ab618ea44384bcd611859ec84c2e866a3","ssdeep":"","tlshash":"a471e93ea3f2f27ee10b8eb56591745430116473de0282a8fa8c9b74e3cb49e5531744","first_seen":"2026-02-13T23:33:09.595252Z","last_seen":"2026-07-06T00:34:40.469741Z","times_seen":7,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":14,"connect":1,"send":0,"wait":12,"receive":10,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1inch-docs.vercel.app/favicon.ico","fqdn":"1inch-docs.vercel.app","domain":"1inch-docs.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1inch-docs.vercel.app/","date":"2026-06-23T23:42:13.655Z","timestamp":1782258133655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1inch-docs.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1inch-docs.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 23 Jun 2026 23:42:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: DMCA_TAKEDOWN\r\nx-vercel-id: arn1::kwq75-1782258133661-fdb62c828977\r\ncontent-length: 103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":103,"size_decoded":461,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"34a4ce382a6c356d9d61cc8378443439","sha1":"3a8cfcd49a3699a91d44c2e16f19e777ba4c2ba0","sha256":"9e8edb1973b5b8a25d2125eaf7727eb1a9a8356135919be7b33fe42af53573ea","sha512":"12ebdfaae08dd25558a54ea053a1ef0ad93292e7defd2dac623ea0bd7ebdaa5a8b30c7063485ec49793820387e6a779430e0284627ec6dae11770afbb970c22f","ssdeep":"","tlshash":"f5b012f524e10467d5e91355f10964841a8043f16f14fe4008c1df5c934ea7ad7bb151","first_seen":"2026-06-23T23:42:36.627956Z","last_seen":"2026-06-23T23:42:36.627956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"1inch-docs.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
