{"report_id":"25fcf5ad-12c2-4cbb-811e-9a37c5828a58","version":6,"status":"done","tags":[],"date":"2026-01-12T14:09:45Z","url":{"schema":"http","addr":"ledger-live-connects.org","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"ledger-live-connects.org/en/index.html","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"title":"Ledger Live Security Guide | Complete Protection Guide 2025","dom":{"size":9250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9f1276e8b5a726020c933a51b0f4c953","sha1":"f14b1a1b7cdf93eda288c46f82ee0a061a317ada","sha256":"4948f582fca5d1295268967d77b2427a99a95ef85216207856637e433308fd6a","sha512":"e9fb7cd898c1f0eeee0104f3c154aeb398957bd54a5bfe11b9bd28adda1e14db2282a7e4bbf7349b59bc4f105ba7bfcbd294cf00b9ed66bbee853ba1aa6e21a0","ssdeep":"192:0esQbY5hiHcb2ybP4m2QBrk9InP3PujVF6YM7ipzzh4:0eAbz4m3BMIPWDu7ip/G","tlshash":"46125412b0f4712b01ab41afb266622c6f624147d61b2a0873fd415eefd2fd0990b6df","dom_hash":"domhash67cebd5920ec01abb910e86f8a42a87e","first_seen":"2026-01-12T14:10:06.316987Z","last_seen":"2026-01-12T14:10:06.316987Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-live-connects.org","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-16T14:09:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger-live-connects.org","ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":33942,"sent_data":2428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger-live-connects.org/js/main.js","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"92a1763e47bf3579bf0a4ade31126483","sha1":"2618f1e50f1aa8638cc7b7f9f878919e53a6f558","sha256":"2e4c0665003f9a835865a0ebae7df454cdab8a8ab697a46be48100f27d1aa011","sha512":"fa16b0c72ad60b26e7016e90362a2d0b1a7a13bd80098447df57aa9ff56e25952c46624a2ca523f2f610a699588843ba45a3e88beb4018a7075de809eaa3b248","ssdeep":"96:9lkiFsQP5yMiS2a+1MG85HQrYFfQV6KRciENTa6v:9GYszXpaGMG85HRJCciENTaE","tlshash":"77c1131a602012ba8033b375a7575168e93710b77006a9053f6e9b492fb1d988df2ffb","size":5680,"data":"","first_seen":"2026-01-12T14:10:06.320301Z","last_seen":"2026-01-12T14:10:06.320301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger-live-connects.org/js/main.js","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-live-connects.org/en/index.html","date":"2026-01-12T14:09:24.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-live-connects.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 21:57:55 GMT","end":"Mon, 16 Mar 2026 21:57:54 GMT"},"fingerprint":{"sha1":"3C:09:C5:68:FA:50:DB:E6:B4:0B:D3:9F:F9:9E:65:F3:77:55:0D:73","sha256":"EC:84:DB:D6:54:2D:7B:08:4C:0D:B9:BE:4D:1E:DF:0F:7A:F1:E2:63:BE:1C:A1:41:07:6D:B2:07:0F:43:C8:3E"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: ledger-live-connects.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-live-connects.org/en/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 12 Jan 2026 14:09:24 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Thu, 11 Dec 2025 10:28:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"693a9cea-1630\"\r\nExpires: Tue, 13 Jan 2026 14:09:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"92a1763e47bf3579bf0a4ade31126483","sha1":"2618f1e50f1aa8638cc7b7f9f878919e53a6f558","sha256":"2e4c0665003f9a835865a0ebae7df454cdab8a8ab697a46be48100f27d1aa011","sha512":"fa16b0c72ad60b26e7016e90362a2d0b1a7a13bd80098447df57aa9ff56e25952c46624a2ca523f2f610a699588843ba45a3e88beb4018a7075de809eaa3b248","ssdeep":"96:9lkiFsQP5yMiS2a+1MG85HQrYFfQV6KRciENTa6v:9GYszXpaGMG85HRJCciENTaE","tlshash":"77c1131a602012ba8033b375a7575168e93710b77006a9053f6e9b492fb1d988df2ffb","first_seen":"2026-01-12T14:10:06.320301Z","last_seen":"2026-01-12T14:10:06.320301Z","times_seen":1,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":94,"dns":1,"connect":43,"send":0,"wait":46,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-live-connects.org/css/style.css","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-live-connects.org/en/index.html","date":"2026-01-12T14:09:24.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-live-connects.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 21:57:55 GMT","end":"Mon, 16 Mar 2026 21:57:54 GMT"},"fingerprint":{"sha1":"3C:09:C5:68:FA:50:DB:E6:B4:0B:D3:9F:F9:9E:65:F3:77:55:0D:73","sha256":"EC:84:DB:D6:54:2D:7B:08:4C:0D:B9:BE:4D:1E:DF:0F:7A:F1:E2:63:BE:1C:A1:41:07:6D:B2:07:0F:43:C8:3E"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: ledger-live-connects.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-live-connects.org/en/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 12 Jan 2026 14:09:24 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 11 Dec 2025 10:28:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"693a9cea-3bc8\"\r\nExpires: Tue, 13 Jan 2026 14:09:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"48e5ef81db67f6137e420484c2d112c3","sha1":"c53a5b5861ab62a62bc8a2fb8649f9b48ca12940","sha256":"188c315b338fc7781cec12b91ac68c9ac41eb9add30415fdec8fe99971328867","sha512":"08774e35aae78a457236c2cebc216a647cced9b54aee974d0f2fce7429c93dfb77e4c317db70499f62f76b4667a45b55442ad88d3207b028370b490fca46c75a","ssdeep":"192:QSQPfCCnMDPpPqJ33GyDdEN2qN/SsyHpb7QEzFK8F/O8zvpOu9DPfStDvqnDGmD8:MmJSZ9XyGthUv","tlshash":"2462601d964221ab5537ebb8abf68209f3d06153ce02132dbfda62510ff63b86151f8c","first_seen":"2026-01-12T14:10:06.32347Z","last_seen":"2026-01-12T14:10:06.32347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-live-connects.org/images/favicon.png","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-live-connects.org/en/index.html","date":"2026-01-12T14:09:24.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-live-connects.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 21:57:55 GMT","end":"Mon, 16 Mar 2026 21:57:54 GMT"},"fingerprint":{"sha1":"3C:09:C5:68:FA:50:DB:E6:B4:0B:D3:9F:F9:9E:65:F3:77:55:0D:73","sha256":"EC:84:DB:D6:54:2D:7B:08:4C:0D:B9:BE:4D:1E:DF:0F:7A:F1:E2:63:BE:1C:A1:41:07:6D:B2:07:0F:43:C8:3E"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: ledger-live-connects.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-live-connects.org/en/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 12 Jan 2026 14:09:24 GMT\r\nContent-Type: image/png\r\nContent-Length: 138\r\nLast-Modified: Wed, 10 Dec 2025 19:52:38 GMT\r\nConnection: keep-alive\r\nETag: \"6939cf86-8a\"\r\nExpires: Tue, 13 Jan 2026 14:09:24 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"072fc284b66358792c16a5f6d9eb5d5f","sha1":"1291835625b510f1b91e462718b87cb91021460b","sha256":"4b73011a43bb1b67affd1572ef04a7c39b2fd2d0cfe7c222f8e729354c7f8d97","sha512":"cba45f05dffdfe9bd983831fbd0d6a88d41b9c0a0d243ae95fa7924e2382f81864b714f0b1525b29f9dc20d6e5a93ac0d02205bc52c0ce953569ab543c80a6fb","ssdeep":"","tlshash":"cbc02bc026042c32c65417334d22d493fc30c5244e7202c3348180503c2540ce068f02","first_seen":"2026-01-12T14:07:20.228502Z","last_seen":"2026-07-07T20:11:55.758228Z","times_seen":102,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-live-connects.org/","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T14:09:24.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-live-connects.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 21:57:55 GMT","end":"Mon, 16 Mar 2026 21:57:54 GMT"},"fingerprint":{"sha1":"3C:09:C5:68:FA:50:DB:E6:B4:0B:D3:9F:F9:9E:65:F3:77:55:0D:73","sha256":"EC:84:DB:D6:54:2D:7B:08:4C:0D:B9:BE:4D:1E:DF:0F:7A:F1:E2:63:BE:1C:A1:41:07:6D:B2:07:0F:43:C8:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-live-connects.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 12 Jan 2026 14:09:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2115,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"c241839a7f36cd29f109ef2839d16247","sha1":"57273df0b68c932eee98492110aabdfe8c6bcf9d","sha256":"28e8470f46574510d3897c07473f98e820bbec874818cbdd7e68ad45f3530311","sha512":"dd47901789e423ef3c0eb894dd7a29214f9a0071309a1a922e2af7b6bb02e7729866d4ad47e39b85ace2c1b04322dacc96829faa8e411e3eee6d3da88a8f7ebe","ssdeep":"","tlshash":"0c41e32b60c5390d1335439dba923528e953080b539a7864b3ce532f9fb5ba0c4eb5af","first_seen":"2026-01-12T14:10:06.328177Z","last_seen":"2026-01-12T14:10:06.328177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":136,"dns":7,"connect":59,"send":0,"wait":64,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-live-connects.org/en/index.html","fqdn":"ledger-live-connects.org","domain":"ledger-live-connects.org","tld":"org"},"ip":{"addr":"193.24.123.182","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-12T14:09:24.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-live-connects.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 21:57:55 GMT","end":"Mon, 16 Mar 2026 21:57:54 GMT"},"fingerprint":{"sha1":"3C:09:C5:68:FA:50:DB:E6:B4:0B:D3:9F:F9:9E:65:F3:77:55:0D:73","sha256":"EC:84:DB:D6:54:2D:7B:08:4C:0D:B9:BE:4D:1E:DF:0F:7A:F1:E2:63:BE:1C:A1:41:07:6D:B2:07:0F:43:C8:3E"}}},"request":{"raw":"GET /en/index.html HTTP/1.1\r\nHost: ledger-live-connects.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-live-connects.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 12 Jan 2026 14:09:24 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9423,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"568a4e06abe3dcd393f5fea008495064","sha1":"416a9920661adf176d4d7e139c970f3ceb7a6a79","sha256":"57d9e9fa4ff68d76c86ebb9ae3796830dab637f5df1761598c290fdd463755cc","sha512":"c49f16cc584d24618ef5971018036fe75d1ab108415fff63a6a25814562d5d1baeea56dc2a25fc2dc2e1b1193ea3e76edf29e97c99cd1a21a40b75c6897986a5","ssdeep":"192:aBsh4/MOaG74PkGQc+k4I6B3PW7VM6bYx+LzQr:aBaLTknc0I0+26Yx+Hw","tlshash":"84127526b1c4702b017b426fa266a25cff214187d2172a4872fe525feff2f90880b5d7","first_seen":"2026-01-12T14:10:06.330371Z","last_seen":"2026-01-12T14:10:06.330371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-12","alert":"Sinkholed","trigger":"ledger-live-connects.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}