{"report_id":"23519b2b-8b53-4fa4-8ece-a0515c954c22","version":0,"status":"done","tags":[],"date":"2026-07-20T10:52:58Z","url":{"schema":"http","addr":"309282-overviewledn.com","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"309282-overviewledn.com/","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"title":"Ledn: Account Verification","dom":{"size":76889,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18448)","md5":"faedca04360de26bef0476718a8cea4e","sha1":"673a76a554f6f3a94e693d11dc5d3d02b2d0cc7c","sha256":"a6bf0a6015bc9b994fa8c8b7e79af37370e4bd5ad0c8a9de5409e0d9adf395ef","sha512":"dff23a39bc1177fc019665539d3b2a9f142b2454a773dbc3033ad5ece68584214fd47f3050c4d094796c8b9a6853549374b294c2be13863b2d00e250c573fed2","ssdeep":"768:oKbFkOOk7koqkfCK2lwU2kqCD6X0yqsLwzk4qOfl7I:bO+Io3g+kyJalqOtI","tlshash":"1373f9606165883a605742c9a9e6176d307d9247ce0b0148feac43f75fceefae737a84","dom_hash":"domhash8cc4c8b5ae58cd078e5a7f769c5eb16a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"309282-overviewledn.com","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T10:52:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"309282-overviewledn.com","ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":8,"received_data":270058,"sent_data":4205,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"309282-overviewledn.com/","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"adea1715efa079b38ce06d9fc8c81b0e","sha1":"81ca2b3ab756775da02e69807aa697137f6260a4","sha256":"896bee5a5fd8c4e6b16fe48845d32dc3f389cd3e4322b02242cb9fc27dfd0785","sha512":"15d830a93fc0bb8f341f5dbfa959ce76a9931fd139992d5bea74b1025e11ee9f167ec81c2f8f1ed1852b7e3d0de29a69bf804867cf9d75dc06ede7dd1b25a15a","ssdeep":"192:R3Bwzk4t8f2XXUyVttEn0AXalOtycBfrdZE/cRPjptoL273WnfUDqjC/01utALxe:jwzkJuXkIt7OhfrdnPVaLm3WfUcLJhLg","tlshash":"206272b775a714360afb65fb26af4389793940476c85d0217d6d84680fa4f82323bfe8","size":15752,"data":"","first_seen":"2026-07-20T10:53:02.936048Z","last_seen":"2026-07-20T11:09:47.503455Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e3aa614a71f672893c087f31b9ae5e9","sha1":"45e7a26d3b9dc1b0572a692ca16620c4cb54963a","sha256":"d23d798378973342b8b098366e64f25cfedea8864d60615ff1a68ce1f22e09c4","sha512":"834bfc43fc58237983842679e27d0063d57b9c5a9b88c4ef0ddebbb3e8b2a9f4b266f6864f2af20faa4a5e55fb6d40dffff8bc7af5b81e5f3956b4a912c8de14","ssdeep":"","tlshash":"54e0c0a73cd036118cbae0714147644890185960ccab88d0df5140c13d467462e351c4","size":343,"data":"","first_seen":"2026-07-20T10:53:02.937173Z","last_seen":"2026-07-20T11:09:47.504347Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"309282-overviewledn.com/","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T10:51:40.296Z","timestamp":1784544700296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Sun, 19 Jul 2026 01:48:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11733\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54156,"size_decoded":12269,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (625), with CRLF line terminators","md5":"4c5f08200cb34afe2e04047ff6885cf4","sha1":"d8aac61303758cb45a1de9ee250d345b1c95656b","sha256":"09240d570582d80203700616ff6ada390461b77a58971e529937e5d798a233d7","sha512":"86d79c20fb7751ff21d8768ddbcdbaef44976d8ff9ee98b762b8fcb091d6ff67e5d90f885d73f8fe5a5a1de09d422ceb44a9bd4ae9108442b8b803d763602bd1","ssdeep":"768:6QYqki/kmko3kpvLXfIdSGOUup/OKgbYEuQ1Pc:Y3bjo056uJcYEB1c","tlshash":"5f33f831b185103d64738096a7a5579ef8398103de074214beac52a78fd3edbaa37bdc","first_seen":"2026-07-20T10:53:02.914257Z","last_seen":"2026-07-20T11:09:47.491226Z","times_seen":3,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":280,"connect":62,"send":0,"wait":63,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/admin/api.php","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.057Z","timestamp":1784544701057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"POST /admin/api.php HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://309282-overviewledn.com/\r\nContent-Type: application/json\r\nContent-Length: 76\r\nOrigin: https://309282-overviewledn.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":76,"data":"{\"action\":\"track\",\"sid\":\"S17845447010453f771c\",\"step\":0,\"_t\":\"ld_8k2m4x9q1\"}"}},"response":{"raw":"HTTP/2 200 \r\nset-cookie: PHPSESSID=b87ed499c65ff00eb5b2f2f108c2b50b; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://ledn-verification.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Token\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":657,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-22T05:26:11.143149Z","times_seen":177187,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/fonts/TWKLausannePan-400.woff2","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.070Z","timestamp":1784544701070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/fonts/TWKLausannePan-400.woff2 HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 18 Jul 2026 23:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51952\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":51952,"size_decoded":52345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 51952, version 1.0","md5":"3fe0aee9e337f4f2f2095ed1debfd468","sha1":"948fb824845358df25dbe55d6cfd9bece3b26cbd","sha256":"9d385a27dbe58e24963aec2a11a7cfccfe740b0c751dfcf564ef2499e779aff3","sha512":"646af50cc38d392417ea9f25721091da0f06333136a5a0e306562087818c2f17afbb97c86b3f4105893cdd4c3668b7297963c9f49f89862b7aee330e736419ab","ssdeep":"768:4WhNZnC3LNKkiv1AX/yHIcPC/Lv1x8VJrEyOuqMUk/oJdZcfH9f8BXZ7Q0fT4VqB:1UUz6/yHIt/KJrrOuqMhSZclGXZ7bLB","tlshash":"67330293a4242d895934589d29f23c4fb00e9c7611e3ae1ab51a05c3ac1fe0bdf79ddc","first_seen":"2025-08-11T21:35:15.549303Z","last_seen":"2026-07-20T11:09:47.494997Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/fonts/TWKLausannePan-500.woff2","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.071Z","timestamp":1784544701071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/fonts/TWKLausannePan-500.woff2 HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 18 Jul 2026 23:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52588\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52588,"size_decoded":52981,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 52588, version 1.0","md5":"753d3c248cced794bbc4a1fa1190a9a2","sha1":"2327422a5fb193fdc15cb4d381d13d516143e35f","sha256":"352d840866a0675abf55d77d12723971b8a7fdff595b90a296d388e503099cdf","sha512":"a0956aeca5d1c2b145b5f836c40471f9b2fd4528c5708bb9fa372bd3724f10da8c21f5b11c8449f59bb8d7c19da156b8e97b52f7d8584881fbc71c19a2ccd47c","ssdeep":"1536:Bh4IFw7I9QpBXjffWYnmiUM2vnXhOR3+mI8O6yA:BhXqBTffjnNcXhOZ+mIyyA","tlshash":"c333f238c2cad7cec83a137891a98ef961ae3d23eed749c014566b85430684757fb23d","first_seen":"2025-08-11T21:35:15.517759Z","last_seen":"2026-07-20T11:09:47.501504Z","times_seen":4,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/ledn-favicon.svg","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.328Z","timestamp":1784544701328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/ledn-favicon.svg HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=b87ed499c65ff00eb5b2f2f108c2b50b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 18 Jul 2026 23:39:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 313\r\ndate: Mon, 20 Jul 2026 18:32:22 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":606,"size_decoded":752,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9b3117f18a0f9c9093a380d6d904421","sha1":"c2712d9aefabea0f65326eabb8140d8e5e53040b","sha256":"87d587c814522c3522bfe7261e0f05a66616fdb9ea3d54ec76c045f403ba851a","sha512":"1d0fa222c81ef6b750104607c8ec8a4956c49372e8daa109dbb4f440d80c2136edf0e5c596e9e4be27d94798fdb39ec044486ad8e7e3897e76a558323d055cea","ssdeep":"","tlshash":"e5f0accc919894059020c7206eadaa096036a1cf918c1698fe9c692afb189f76961bac","first_seen":"2026-07-20T10:53:02.930064Z","last_seen":"2026-07-20T11:09:47.498435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/ledn-logo.svg","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.055Z","timestamp":1784544701055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/ledn-logo.svg HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 18 Jul 2026 23:39:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 692\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1649,"size_decoded":1131,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f7b22144936eebc6c05a545fd1b9971","sha1":"3a6512b4d48333b290fdc297c912a402ca4482aa","sha256":"ccaa0d3fe0e4e8b071c7e62ec386d2c97a89058024ef67b7f9cf55723bd9140c","sha512":"860226fa424f94f3eaf6ef67b94f053c5b2d22ba043f0ab19230c12b0813b0cff627c1a0b529f9ec2bf36816551c1ea40d469e821846628bc860f642b326ae6f","ssdeep":"","tlshash":"633140d223fd95d4bc850782cfbc20e172bdf2ed630405c8a66924b98da25c931d8a63","first_seen":"2026-07-20T10:53:02.931056Z","last_seen":"2026-07-20T11:09:47.493228Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/fonts/TWKLausannePan-600.woff2","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.074Z","timestamp":1784544701074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/fonts/TWKLausannePan-600.woff2 HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 18 Jul 2026 23:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52644\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52644,"size_decoded":53037,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 52644, version 1.0","md5":"538e2d707219bb9353eb8c78d19dfe73","sha1":"ce385f13815bf51b7fca1846d8c5e732045646b6","sha256":"77b2bce10e6e19d145cbcdbb75a40b9d31f533fdcfd1116c0aa7e3cd62ccbf47","sha512":"7878a029cbbb64cbb3f3c9a3a44b6632fa75d55161cc314f2e278e93bd997b5dcfdd5566963f88340db80fc3fc689b4afcf0bbec83872283487662b9b2f9b03a","ssdeep":"1536:rarKf+zMhW4tBpBkJHxiwGgQnWM6V6ud8H:rarKf+z74tBdg8jud8H","tlshash":"f23301439156faffd30ea8b47101a1c6a1ff85396b560fcf4aa1e2838960057d5ec78c","first_seen":"2026-07-20T10:53:02.932593Z","last_seen":"2026-07-20T11:09:47.502485Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"309282-overviewledn.com/assets/fonts/TWKLausannePan-700.woff2","fqdn":"309282-overviewledn.com","domain":"309282-overviewledn.com","tld":"com"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://309282-overviewledn.com/","date":"2026-07-20T10:51:41.076Z","timestamp":1784544701076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.309282-overviewledn.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:12:04 GMT","end":"Sat, 17 Oct 2026 17:12:03 GMT"},"fingerprint":{"sha1":"11:B7:B3:CF:94:4E:90:22:A4:24:2F:12:17:EA:C2:58:37:F7:64:1C","sha256":"13:C0:A7:A0:60:C3:11:A4:68:AE:A1:49:C6:EC:5A:71:AA:4D:BF:E9:CC:B1:A9:DA:02:DC:C0:31:A6:F3:FF:7F"}}},"request":{"raw":"GET /assets/fonts/TWKLausannePan-700.woff2 HTTP/1.1\r\nHost: 309282-overviewledn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://309282-overviewledn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Jul 2026 18:32:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 18 Jul 2026 23:45:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52840\r\ndate: Mon, 20 Jul 2026 18:32:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52840,"size_decoded":53233,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 52840, version 1.0","md5":"f10842caf4883ada8f892bd151b7a266","sha1":"6009841426733cb4698c40982d091bb44feb0c95","sha256":"6587e99ab3f8465d2678c98ef9d0abd972efeec83566cb343e4a121f9e7cbd63","sha512":"c0cd836f1acf4b48c76fb5b4c94ca7cdeb5c64a56cf03a19cccf1fc1e7aeff1162eb4d1f9e0f189afebf728fc078ed17da3be16357ce2e49229c5ae2c43fdb5f","ssdeep":"768:pbo4r8nX6cZT3rvWVqo+fkJvy90QsEUyiP0QZliXvm9yg/ROpySdsdktooS2uiYF:pbo4r8nXpPLsIaMU30pm9KpCkta2lCv","tlshash":"d93302622117e22573b0cf20fa63a6b174d8defc6caaaf41a53c105a557f49015bb83f","first_seen":"2026-07-20T10:53:02.935011Z","last_seen":"2026-07-20T11:09:47.496763Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"309282-overviewledn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}