{"report_id":"173a238d-8cb8-4b2e-a941-81450e5ef9dd","version":6,"status":"done","tags":[],"date":"2026-03-28T06:00:21Z","url":{"schema":"http","addr":"ledger-crypto-wallet-protect.com","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"172.67.170.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"title":"Ledger Crypto Wallet | Cold Storage Protection","dom":{"size":19264,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (484)","md5":"c650e275fa9a85e6f12a735ab7da0c5f","sha1":"3961dd6935d2bc6713e30456ebb7e1421b990212","sha256":"981e712d39890db67f854c649cdea1e74d7acc68f7f7856aa506ff8100b2dee1","sha512":"85df392f3fc3cb0f081c4159bd23fd5c34e2881ff6d6f7d6ccf0dedcfecd0a3e53d5681f51154ffe20713022ef9715981a7d050ef2e60bf5df0f9ff6cb9bc635","ssdeep":"384:BvqLjIK0caVujWc23kbUgxhYvitc2ndKJntr8+b:QxJaVuycWkwgxhYvSM7b","tlshash":"0882a923b0e27a2603c7526e6422f6aefd664447c61a5719b39dc10f7fc4861cab724f","dom_hash":"domhash85102af85f9a90af56aa8745fe148b6b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-crypto-wallet-protect.com","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"172.67.170.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T06:00:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger-crypto-wallet-protect.com","ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":4,"received_data":61204,"sent_data":1918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"618c6ae626efa54e51254ffee706d485","sha1":"4b7e5e940eea767353d5d7bccdd25e9794ee20fc","sha256":"9241bee8b34d3244ca765dfda0a5b6a9e47b7187db79fa292a78ab83f14dac56","sha512":"401b3236297a9d200667c10d6dd75e370e3d450f22c375327e8af116fd61d61e87bdd033e49e4e50f0dea5012307952ae4942c70879b26982c2531e5c990d6a8","ssdeep":"","tlshash":"78f02b1d78e2313a483b71fe8adf46d42b31308be502ec663c6cd6082f924610db9ac6","size":631,"data":"","first_seen":"2026-03-28T06:00:25.424223Z","last_seen":"2026-03-29T02:00:30.767028Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T05:59:59.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-crypto-wallet-protect.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:53:43 GMT","end":"Thu, 25 Jun 2026 23:53:42 GMT"},"fingerprint":{"sha1":"18:09:16:42:10:3E:95:5F:A8:0D:06:FD:8D:3D:FB:00:34:A2:6B:E8","sha256":"CF:4C:DF:36:ED:54:E3:3D:54:0F:5A:91:8D:F8:95:82:D4:32:9A:88:C5:F5:FB:D8:24:B8:0F:D3:3D:2C:D4:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-crypto-wallet-protect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 05:59:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 11:24:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMEkIXwq8iX3II5npgWKlq6SYZ%2F8D7iSJUxzePU6CsGtLpDgdDH7U4xhbU0cWDyaeOGuM30UtuF4oTaCZ5u2YL6zJRQB3phQjHoqQdlLEcj8e5ENQugvdBbafmJ4hwicDQMsSLN5zTn5UCrD%2FjzTzz4Oow%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e346974dc6456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19420,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (484), with CRLF line terminators","md5":"3e860490fc7d1e8655028ede7b076ce7","sha1":"82d206e805636f86018452ce642177705f2bd635","sha256":"c4179c9f807f6448b27658779a996833d1c5c2da877aa0151b09cd9e5e8858a0","sha512":"8816bd02f21a10f170a80f56641743d8ea9f733fcefbfff39eb9fbe8e51a5ec54209fc4fc076aef409465d1a095aadb24f6c986d9eaf569649d0751abc1f90e4","ssdeep":"384:dIKxQLagx5aeCqFbU8UEMyYn1U1jSvfDJPBu:dxWLagxAetFw8UEMyiFPu","tlshash":"8a92897271c17a2703e742ae6422f7adfd664043c2165659b39ec10f7fe4861cab728b","first_seen":"2026-03-28T06:00:25.420565Z","last_seen":"2026-03-29T02:00:30.764538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":24,"dns":2,"connect":2,"send":0,"wait":194,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/css/style.css","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-crypto-wallet-protect.com/","date":"2026-03-28T05:59:59.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-crypto-wallet-protect.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:53:43 GMT","end":"Thu, 25 Jun 2026 23:53:42 GMT"},"fingerprint":{"sha1":"18:09:16:42:10:3E:95:5F:A8:0D:06:FD:8D:3D:FB:00:34:A2:6B:E8","sha256":"CF:4C:DF:36:ED:54:E3:3D:54:0F:5A:91:8D:F8:95:82:D4:32:9A:88:C5:F5:FB:D8:24:B8:0F:D3:3D:2C:D4:C4"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: ledger-crypto-wallet-protect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-crypto-wallet-protect.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 06:00:00 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LWiyZBPW0DZxqlbABqa1Uz3fj4qwc%2Fx7DV3MsmDPQUUoFzcfGwL4C6Te5Vfm%2BTukpwOHDUQ%2FaWj9n5f9RsNEgQAOvZya6uYrMotbdgny3nZPHshDhtbLVrCvPe1LRpovFT64r1Og8xJimRS2X8y3NNhQ0g%3D%3D\"}]}\r\nlast-modified: Fri, 27 Feb 2026 11:06:20 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a17aac-1967\"\r\ncf-ray: 9e34697728ad56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5f9447625f51e69f0b2835e2c3ed603b","sha1":"14aae154e5c63086801e7bd2b984d6c77c0e58a0","sha256":"6d33478fcec3cebfa4da1021c0c07466dfec8311d18515508bab4493d00f8262","sha512":"d3d30fe15eda86f4eb4c5503f71071ac517162dc50a740c6bf5b0cb02b8638a96318723a2ba0633f6c977df579a679a931cfcb7347836fcde68171758dc146f8","ssdeep":"96:25V+JRLI6kEyx8sPTsIO3CQv+7bfKmW05io7H8t8H9fNFzDobE+5VQ:i+JKx8U7TNdX","tlshash":"e4d1209c6700a0b9ae37d3a8f7a7caddb3d9a154c905437dbef61058a4c93b414e1f88","first_seen":"2026-03-28T06:00:25.421498Z","last_seen":"2026-03-29T02:00:30.765666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/images/2.webp","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledger-crypto-wallet-protect.com/","date":"2026-03-28T06:00:00.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-crypto-wallet-protect.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:53:43 GMT","end":"Thu, 25 Jun 2026 23:53:42 GMT"},"fingerprint":{"sha1":"18:09:16:42:10:3E:95:5F:A8:0D:06:FD:8D:3D:FB:00:34:A2:6B:E8","sha256":"CF:4C:DF:36:ED:54:E3:3D:54:0F:5A:91:8D:F8:95:82:D4:32:9A:88:C5:F5:FB:D8:24:B8:0F:D3:3D:2C:D4:C4"}}},"request":{"raw":"GET /images/2.webp HTTP/1.1\r\nHost: ledger-crypto-wallet-protect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-crypto-wallet-protect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 06:00:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32340\r\nlast-modified: Fri, 27 Feb 2026 07:32:18 GMT\r\npriority: u=4,i=?0\r\netag: \"69a14882-7e54\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTYyzQm%2BBB6gFDHBvQpY%2FholDWhBNjLeS%2BCgqqh5QzY%2Bf2hRZK%2B6fq2Sx8%2FPx0BKcPAKKkHlNZRbBuLE9zbJxZHzqWPbKfKweSZh%2B9K8hd6QAYXObaHqaeKUlaZnwPouSGT6Vy9ZPe5U8iMSoRjl3DKpGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e346978c8b656a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"652d491b43506d3174b2ea9cfb0626ec","sha1":"56c6793fc5b59cbef41f2c9b5e52e301268b92da","sha256":"8ec4706f27be8d4096208f49dc4b75575992ebe8ef36186a8a7d951f385d3a66","sha512":"af9cf8a30d3a700d44bb5cec810f8385c07b83ea46706f1982afb8b46bd9200da7877361f029727a585563af415955074040427a5b3f5b94b7a09a33d3c1b9ae","ssdeep":"768:a32VGdQQnxm4s0XlQw+469x+BfmmZ+aOT38e0XGjl:nVhqg4s0X/fUx+BfAaOtE+l","tlshash":"35e2f247e39a0371f754a0b4a8720b64d6907a318772ca8f131be611bd63754af1d7f4","first_seen":"2026-03-28T06:00:25.422388Z","last_seen":"2026-03-29T02:00:30.762895Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-crypto-wallet-protect.com/images/favicon.png","fqdn":"ledger-crypto-wallet-protect.com","domain":"ledger-crypto-wallet-protect.com","tld":"com"},"ip":{"addr":"104.21.28.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-crypto-wallet-protect.com/","date":"2026-03-28T06:00:00.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-crypto-wallet-protect.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 23:53:43 GMT","end":"Thu, 25 Jun 2026 23:53:42 GMT"},"fingerprint":{"sha1":"18:09:16:42:10:3E:95:5F:A8:0D:06:FD:8D:3D:FB:00:34:A2:6B:E8","sha256":"CF:4C:DF:36:ED:54:E3:3D:54:0F:5A:91:8D:F8:95:82:D4:32:9A:88:C5:F5:FB:D8:24:B8:0F:D3:3D:2C:D4:C4"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: ledger-crypto-wallet-protect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-crypto-wallet-protect.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 06:00:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 138\r\nlast-modified: Wed, 10 Dec 2025 19:52:38 GMT\r\npriority: u=6,i=?0\r\netag: \"6939cf86-8a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58P6iyMRlArXQw9E%2BpM5%2BBiLHAqwoFxaT0tmLjtMjiZ4CQ9ZGQ2wDDnI2PvoZowvDlYPeEAi5N2llOw%2FzbFmM5LtChWlz4JG9Vg4vA27ji%2BvZdhn7ej0cKNI2dCNZUpgSk5fQphDhdqCCvu2M5jlYCkVtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e34697a88ba56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"072fc284b66358792c16a5f6d9eb5d5f","sha1":"1291835625b510f1b91e462718b87cb91021460b","sha256":"4b73011a43bb1b67affd1572ef04a7c39b2fd2d0cfe7c222f8e729354c7f8d97","sha512":"cba45f05dffdfe9bd983831fbd0d6a88d41b9c0a0d243ae95fa7924e2382f81864b714f0b1525b29f9dc20d6e5a93ac0d02205bc52c0ce953569ab543c80a6fb","ssdeep":"","tlshash":"cbc02bc026042c32c65417334d22d493fc30c5244e7202c3348180503c2540ce068f02","first_seen":"2026-01-12T14:07:20.228502Z","last_seen":"2026-06-08T20:38:07.086795Z","times_seen":93,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"ledger-crypto-wallet-protect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}