{"report_id":"2d5a9d47-e2d3-4ea3-a6a2-76b3de10a49f","version":6,"status":"done","tags":[],"date":"2026-04-24T13:52:21Z","url":{"schema":"https","addr":"www-ledger-app.live/app","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www-ledger-app.live/app","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"title":"Ledger - The Most Secure Cryptocurrency \u0026 NFT Wallet","dom":{"size":2272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7bb99c806186848df5d869688f4ccc59","sha1":"129ee57369c85d9c855c2e795326ba01109216c5","sha256":"746c7bf68362aebe2ec47119ca7f7401edcb3ecece29162909929a217520df96","sha512":"d286d184fd5464d12888b2eb5ef0a96bd3a0eca23ce360827579c6035c0f782babeaeed8dfa8bdef7131cc49da840e6f49896ad51f033df7940c5da06467c68d","ssdeep":"","tlshash":"a8414e9660f998a350c280882b31b75e7ec1d303e91bad2431fd06992fe2ec7cc13c68","dom_hash":"domhash4a81e4150d52ce2bbb8c0be1798afe03","first_seen":"2026-04-24T13:52:24.053388Z","last_seen":"2026-04-24T13:52:24.053388Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www-ledger-app.live/app","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-29T13:52:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":1,"received_data":471807,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":2,"received_data":31478,"sent_data":1080,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www-ledger-app.live","ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T08:23:32.260826Z","last_seen":"2026-04-21T08:23:32.260826Z","alert_count":30,"request_count":10,"received_data":731879,"sent_data":5040,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":3210,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www-ledger-app.live/app","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"998fe99d5758d9992b5d1d73f73a9885","sha1":"392cd3e29473972f471f502a50705059399c3ef9","sha256":"26bbbe98305a369459584babc49fffbc3ad6ee53bd279a8d00091b8b0e95b5b4","sha512":"c57f96354ecd1cc7856497a1982b6c6a4771d2fae78553734600ccdd6f1369511cc8a8b82bbee0a9370ee9e99dec0a033bd969d1cca130b77d607c3014d86532","ssdeep":"","tlshash":"3cc02b8c310e4c7041fb2b008b3fb700b043721494e6a931490b23084d30e03db94864","size":153,"data":"","first_seen":"2025-11-25T23:26:48.339997Z","last_seen":"2026-04-24T13:52:24.065575Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RR2HDMWQGK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaba958a3f332ad68ce8500c5627bfe5","sha1":"d31059b178616e13fae7c0a09094ed8ca48eb740","sha256":"9c19201c96eb7c6d98ede8b979689bbfeb010381c753a6eff615d99e6b85ceb4","sha512":"076ff43710c0b7a5efccb820072f339ccf8caf9efa7864b1f22f42e8f858647c773927c773d1e6b1299ed2ae45f7cb0c6f4236d9af7b1448d5e63bbb2047ed7a","ssdeep":"6144:VCSyYQ7bE9JH/WXgxoJDQ/B9zG/jxZZfCGSumIH:gYLJH/WkoBBb","tlshash":"90a4f8ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":471203,"data":"","first_seen":"2026-04-24T13:52:24.054701Z","last_seen":"2026-04-24T13:52:24.054701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/bip39.min.js","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a2b05b4ad096879ead5c5571c0938fa","sha1":"ee643180838a7713a818b8ec2b734dc6c2ac5c5c","sha256":"a9ef5006c380e2ac4a7750dbc71119af7716035c74ac6fb99d2c0e79ca2b4e46","sha512":"2ff358664e93f64acd0aac53ede94cb37cb1c2bf6276da35ff5d9ba23f12fb24b9ad73e18e7042bd0cefca52d5660014e9f85e5ec4a11e155952ac16df711419","ssdeep":"6144:4gG6BSn5NwCkUzi0uCwCwL1NU2HZrGftyWYcAyZI:4gGkSnvXkf0uCwJnHRGftyWYcg","tlshash":"c774b5061e580e3983ed22f010fb2dc511798d0a899c38bfb95ce5d65d29fc6e0d6bad","size":369246,"data":"","first_seen":"2025-11-16T18:15:47.687307Z","last_seen":"2026-04-24T13:52:24.059738Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/appzz.js","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77c4474350dbcd6a627d9d9e5dd41268","sha1":"512e5a3aabfae1d03fa149fb8c5f168378dee274","sha256":"def7a45235462521b0b4d1afebc4b7f68720d37b349f27d50dfb13c08f887d88","sha512":"b67375469150a4fca297ab785812bae88b5fafdfc32f5a9d15a3e9afed1d3dd57af897350221f3d22b0dd44a82a8e0b7e816873888bff037a09631b144ef5843","ssdeep":"768:+PpawZ8x07LpZwOSdE4Y3tM5Ffwg6iUmlUd1cvd:uNJ7lO5dEK5Ffwg6iUmlS1cvd","tlshash":"d8c38626d55222455473f3f5dfe20a09fba24103c30392aa7eed23845fb9545caa3fac","size":122654,"data":"","first_seen":"2026-04-24T13:52:24.063333Z","last_seen":"2026-04-24T13:52:24.063333Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RR2HDMWQGK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-RR2HDMWQGK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 24 Apr 2026 13:51:59 GMT\r\nexpires: Fri, 24 Apr 2026 13:51:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156116\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471203,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"eaba958a3f332ad68ce8500c5627bfe5","sha1":"d31059b178616e13fae7c0a09094ed8ca48eb740","sha256":"9c19201c96eb7c6d98ede8b979689bbfeb010381c753a6eff615d99e6b85ceb4","sha512":"076ff43710c0b7a5efccb820072f339ccf8caf9efa7864b1f22f42e8f858647c773927c773d1e6b1299ed2ae45f7cb0c6f4236d9af7b1448d5e63bbb2047ed7a","ssdeep":"6144:VCSyYQ7bE9JH/WXgxoJDQ/B9zG/jxZZfCGSumIH:gYLJH/WkoBBb","tlshash":"90a4f8ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-24T13:52:24.054701Z","last_seen":"2026-04-24T13:52:24.054701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":90,"dns":1,"connect":20,"send":0,"wait":59,"receive":62,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmmono/v16/aFTU7PB1QTsUX8KYthqQBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:52:00.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/dmmono/v16/aFTU7PB1QTsUX8KYthqQBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-ledger-app.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14820\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 14:20:23 GMT\r\nexpires: Sun, 18 Apr 2027 14:20:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516697\r\nlast-modified: Mon, 15 Sep 2025 17:10:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14820, version 1.0","md5":"e1ed461ac183567c761537bf3eb4a574","sha1":"1a0430d40513f1eb6d4596c552b4f58761a1a0fd","sha256":"e1896b13b2b1bb112fac2f9571bd6c40e118746e77a4511edbf43fbb41bf3e1e","sha512":"02c5f74e2a41d205b7c44981bd69a8539038668c4ffab49679825178da648d8b7a870c9c147671f92753d6fd4f55baac3f0d737a9882f6c72e296a116cb7d3c0","ssdeep":"384:ZJRKFL7Wd/jIlLKEDiqGK0qvWoLlqAJB4XJ:fR6MZqGevbBVJOZ","tlshash":"f462c0fcbabc52f7c61b2a5a11482d32201660ce7271c5109aff541ceef928ad619f66","first_seen":"2025-06-03T07:55:52.433002Z","last_seen":"2026-08-14T22:59:21.706681Z","times_seen":3682,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":63,"dns":1,"connect":7,"send":0,"wait":12,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmmono/v16/aFTR7PB1QTsUX8KYvumzEYOtbQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:52:00.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/dmmono/v16/aFTR7PB1QTsUX8KYvumzEYOtbQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www-ledger-app.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14988\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 18 Apr 2026 18:15:10 GMT\r\nexpires: Sun, 18 Apr 2027 18:15:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502610\r\nlast-modified: Mon, 15 Sep 2025 17:11:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14988,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14988, version 1.0","md5":"c4598219c4b8a5667e824d99b06100b4","sha1":"f425382cda708c7fd291568aa9681537e9596ce3","sha256":"9964608a849396bd00c4bfd7034afe03486469dcf20b4f6b8cbdfdd310369951","sha512":"cd776311d8459b366e0da070c084cfd7e3756e4cd3a35a4aab81510270e5b0c5b432225f1677f243b7f33cc691eb1f9b3fae90fbfd9238d91ca886c2ef76e513","ssdeep":"384:IquHCgBoDey5mnWYndHqLcsJDa00ti/dklCHLs9:IquHS5ITHqha00ti+liLw","tlshash":"3662c011158a8ce8affd98204b85198a70d270d9addff752863042d1ca3879c3f77d87","first_seen":"2025-06-03T07:55:52.413726Z","last_seen":"2026-08-14T22:59:21.707718Z","times_seen":2688,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":58,"dns":1,"connect":11,"send":0,"wait":12,"receive":6,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/kkppagoCFe6I.mp4","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:52:00.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/kkppagoCFe6I.mp4 HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=3473408-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nCookie: _ga_RR2HDMWQGK=GS2.1.s1777038720$o1$g0$t1777038720$j60$l0$h0; _ga=GA1.1.1314911150.1777038720\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37509\r\nlast-modified: Fri, 03 Apr 2026 21:06:24 GMT\r\netag: \"359285-64e94b08da065\"\r\nage: 0\r\ncontent-range: bytes 3473408-3510916/3510917\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZE7pxr%2BlvHfsCPcB5N8zjT67vYIQwuYvgkBZ79K4zDoDSN7%2FN8vsELo1OU5UnzKGMEzmw%2Fx43SSNPB5F9SQ%2B%2FsX2HpRbETQTiEiqX%2BdQx7EPB26%2B78flkEnInPENCqzjmTxabfNa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f159602cd9e56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37509,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d3beb2ee2a4f440d9f6ee9dda1494fec","sha1":"1b32c9578f66faae6b6f3f729f1b21323da60f4f","sha256":"c39d4cb55bfcc647dff0043e19abba4af117c63428b0928afd101bb17d64b0fe","sha512":"a5f03e2933531ded6b1ed2c671331c838be619b353b9c424140896910b829fabca2c37fe87cbac0a812ef7e8c5ed30f3e4ea3c772f3340535a7c7280b7fcad3e","ssdeep":"768:fnPnDFUN6E8DiX1uob5/dYrshmB0e1IS8sc:5wbuYArpqsc","tlshash":"d9f25d9def904012fba1e63d98b0c314f7b0d5e8ca56c35b459952a80df62d01fae4fa","first_seen":"2023-09-20T12:12:09Z","last_seen":"2026-08-14T17:05:00.122725Z","times_seen":651,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/app","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-24T13:51:59.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 24 Apr 2026 13:51:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBSlMXltPwDg7uI800gyZnE4t8GtwWMpkbATbcaYaDqGTf6eXJVq3gYXXtq3rwgS8CqShjVFkFaxJ4zVTy4IMe51SqhVWi8lK%2BW%2BahL5rvMaFu%2BTd9I7tZC2nbCgJcdF7pLDgTI5\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f1595fb2e6d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2325,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4ef9eebf323fba009b425f4b3f11afbd","sha1":"f6fe169188f846fe6a47045366cef67516116b59","sha256":"022a805128a4eda8eb27c821dbad83f31a0553b51c13dafdadb97b174002bc7b","sha512":"88dd7cce394e62febb1dbe3eab44550d55ef281429d9ae6d257cc85a0446c6346c948e40d6858a7565bfb9dd5ddd841df4217ba2e1971778c183d5cf8f59bf9a","ssdeep":"","tlshash":"35410f9561c58c6241b382994a31b7ddfe868303aa5b9d2431fd275b2ff2e85cc23c54","first_seen":"2026-04-24T13:52:24.058112Z","last_seen":"2026-04-24T13:52:24.058112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":37,"dns":27,"connect":1,"send":0,"wait":388,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/gCiDyGQwnY5FaksddDsvM.webp","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/gCiDyGQwnY5FaksddDsvM.webp HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85692\r\nlast-modified: Fri, 03 Apr 2026 21:06:24 GMT\r\netag: \"14ebc-64e94b0920d34\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lnJYgQjtpyqci3n0SPPGPUOZcR7Sb%2FLYmQQqMy%2BPKzFJosWFdDvhSBUbGf89jd9bYH5uGNN0G%2BV8BsCnMA4PFd7rv0wOREvyUJqJd%2BU0asxCUg8hm5qXeitdDHMCr3AXHVp1Ku%2Fy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1595fe9d5256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3b10255a5265e9addaba144ba8fef9a","sha1":"e7c839b579ebff6a146cd3d67b601a1ef79a3fde","sha256":"49932075ede112bec80c178026cbd6cceb4ab3f7fd085494526279ba958c4832","sha512":"c6103ee91953d28747355255f4eae0536ace4748e1b762a5ab8ca6e4df3177c0e8c69be73e7a5723b26860582ad6da2f0c0015778bc1a3050e87177f9aa5838a","ssdeep":"1536:ZGc5aZKuUTHgqVxlCftwIDF3V+rk3D3aAIwwigs5dER:oka8NgqXluXIrnA3L35dK","tlshash":"4b8312901af902d8f3ed5efc4061b22a8bef7a5365b68153407e73850b90e54b0a7cf8","first_seen":"2024-09-20T20:14:08.173237Z","last_seen":"2026-07-13T07:23:42.019139Z","times_seen":310,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/bip39.min.js","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/bip39.min.js HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 03 Apr 2026 21:06:17 GMT\r\netag: W/\"5a25e-64e94b01e8ed9\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NiGM3E9Rgp1Gucj7nOcGFFNfYoYHQjx3iUp7llTFtNFXQGc3H5ne3Vj1j2oi8IAPU79lZNmWSoeHfp4K6rQDpWH8GdpEcpvW%2BqIsopoOs%2Fpm5rsW%2Bj0MnCIJDR97c2gu%2BkdoFclt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1595fe9d5356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369246,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58113), with CRLF line terminators","md5":"8a2b05b4ad096879ead5c5571c0938fa","sha1":"ee643180838a7713a818b8ec2b734dc6c2ac5c5c","sha256":"a9ef5006c380e2ac4a7750dbc71119af7716035c74ac6fb99d2c0e79ca2b4e46","sha512":"2ff358664e93f64acd0aac53ede94cb37cb1c2bf6276da35ff5d9ba23f12fb24b9ad73e18e7042bd0cefca52d5660014e9f85e5ec4a11e155952ac16df711419","ssdeep":"6144:4gG6BSn5NwCkUzi0uCwCwL1NU2HZrGftyWYcAyZI:4gGkSnvXkf0uCwJnHRGftyWYcg","tlshash":"c774b5061e580e3983ed22f010fb2dc511798d0a899c38bfb95ce5d65d29fc6e0d6bad","first_seen":"2025-11-16T18:15:47.687307Z","last_seen":"2026-04-24T13:52:24.059738Z","times_seen":7,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/kkppagoCFe6I.mp4","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/kkppagoCFe6I.mp4 HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 3510917\r\nlast-modified: Fri, 03 Apr 2026 21:06:24 GMT\r\netag: \"359285-64e94b08da065\"\r\ncontent-range: bytes 0-3510916/3510917\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2BqJUGkeuJp%2FYEFJ61Q30VwJJGZkhU0OeMgXIMKHkD%2FOT9IB0QdpTM7LRUsRZ5yf9YhAU9BuIsqTYaXGZmDZxBs1%2F6vrK9n53jM1wcbnRUb2qhvu87IAQg644dZLvO6bautYCfq%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f1595fedd5756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89863,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ca96921e66d900a37d0982af7217024f","sha1":"f509b9137c14b73db5fb5f0225ae0182f85e91f9","sha256":"2d5c907dcdb24e01a0a50431d250954bafd71478bc9538d6593b6585ca570fc5","sha512":"3d1aebc774debcecd1003508cc450b8b5e02889ff5fb90e6549d0ec63f471db16aa9272e641a0d255a6a7633ceb6a9e28b46a74e746578edad4eff02002cd418","ssdeep":"1536:kgVawK8q5TEf2s1VXp8hmRLkUsFSVWNVJpm1tYq/P8to9o4Ec7Bbey:xVPuTEfB1t2hmR4FoVkVrm1r/kynz7B1","tlshash":"9c93e18e4fc50022ffb4df7c4a1eca0ad8d41958c945e3efa2189646a2fe294057f5f5","first_seen":"2026-04-24T13:52:24.06077Z","last_seen":"2026-04-24T13:52:24.06077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":506,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/styleszz.css","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/styleszz.css HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 03 Apr 2026 21:06:16 GMT\r\netag: W/\"335c-64e94b014ab9b\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0TRTqe0cpkSeO0QYUwZebjabbNQtrPHv%2B1EkXypbWY97cviMfSTno%2B1wQhWHFD8c3zuNHnU36NmtGafZgYTks4TNO%2Fpk7wAWMyz07GrIfVhzLM2v1VuQBk03CPeAYG9bWrtS11E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1595fe8d5056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13148,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8b5713d1ec6844d6f95b1f9087694a36","sha1":"f88f64d10225b857d22afc482596e01579426a20","sha256":"b3299237923c60cbe752f66fea8a7dfac0dacafc9afb8b32ba6661b39aa4176a","sha512":"32ee861da57f9ea28a051e06c4a31a6fa618e56f308e30ff4b0d456a75312790ea6d923c5ac251b074b0d0fc6f3ad7231c39622742c91f175156da0dc83318f3","ssdeep":"96:dK8YwkZ0Uix9jRM7Dr68dY46C4ALaLOmg5SCA/2zagQBjDP6088M3:vkZ0UG9dM7Dm8O40pg5SCA/BQ088i","tlshash":"da42ec1ea7102005a43ba3b99fb30759ebaa8023d30784e87fdc72548fb528559a1fcd","first_seen":"2026-04-24T13:52:24.061787Z","last_seen":"2026-04-24T13:52:24.061787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/I6Mp7WwRWWn-mvpZ7cd59.svg","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/I6Mp7WwRWWn-mvpZ7cd59.svg HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 03 Apr 2026 21:06:27 GMT\r\netag: W/\"7c9-64e94b0b4e710\"\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjUrM9maxXFDKkcWLcCCRHOH7IdxQfjgkBHxZ9NAvkLyqctZ32bBjftkJ9hqy13BLHMsDTeEsGilEA2oB20hQD4h60rMn4ge%2F3rbhkBQs%2F2hC%2FvVyjuoMfm%2BCb311bw7YVAN%2Bt1r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1595fe9d5156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab631a2479c23c7727cf637c7e005e4","sha1":"8314d7bb128be21c1b40ce9de4c76b524b651bcf","sha256":"088d1bf639f9a9e3f2ca38cf1ea4c88002c79d6f3e4706868aa3d9f27208109f","sha512":"f9cc6d7447d4ab817cbb5e516eb4f28982a1f30fc727f8551eab06ebb772b269b0e0afe95b28bb56a3d9ef31d59a0b3e491963fe6a2480f7b1ee5dcb0119a2fa","ssdeep":"","tlshash":"a941b4d84ab002fdcc58e9fe0b68312c696651e5f409449df7e39e2ead9844c8c4a2f2","first_seen":"2023-07-02T01:08:01Z","last_seen":"2026-08-09T04:42:56.630684Z","times_seen":656,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/appzz.js","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/appzz.js HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 03 Apr 2026 21:06:23 GMT\r\netag: W/\"1df1e-64e94b07e7596\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gc2bBUoCFh9DwnQOC%2BKzAvDvu9c2gEsI0BvvxwW5wezWadxCDv04uWUoN3VF6Fbjj7I3OELiaZxy2L%2BtnGUZoLut0SjPd2i3dddek8QftssU9NWsxp1FnHvRL3fYdKzHmJbLqFF0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f1595fe9d5556a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122654,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"77c4474350dbcd6a627d9d9e5dd41268","sha1":"512e5a3aabfae1d03fa149fb8c5f168378dee274","sha256":"def7a45235462521b0b4d1afebc4b7f68720d37b349f27d50dfb13c08f887d88","sha512":"b67375469150a4fca297ab785812bae88b5fafdfc32f5a9d15a3e9afed1d3dd57af897350221f3d22b0dd44a82a8e0b7e816873888bff037a09631b144ef5843","ssdeep":"768:+PpawZ8x07LpZwOSdE4Y3tM5Ffwg6iUmlUd1cvd:uNJ7lO5dEK5Ffwg6iUmlS1cvd","tlshash":"d8c38626d55222455473f3f5dfe20a09fba24103c30392aa7eed23845fb9545caa3fac","first_seen":"2026-04-24T13:52:24.063333Z","last_seen":"2026-04-24T13:52:24.063333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/main/Ledger_favicon.png","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:52:00.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/main/Ledger_favicon.png HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nCookie: _ga_RR2HDMWQGK=GS2.1.s1777038720$o1$g0$t1777038720$j60$l0$h0; _ga=GA1.1.1314911150.1777038720\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1207\r\nlast-modified: Fri, 03 Apr 2026 21:07:24 GMT\r\netag: \"4b7-64e94b4285ea2\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjMB7sH5Cb3DKh1%2BMQMkuV4nir4OgAf7iC86mL4J63hrdwejl%2FzbqLcfHZnJvVSmoGw7FLJmY0FurhSklzyAG17JdWfGW4w54GydNF7lDZ%2F0w6QazWLiQH0LIpW45WweSW%2BRxuNx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f1596047dbd56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"e77d6e15aaa797a66863f59181f9b1ab","sha1":"833ae9dceeeb335bcfbc8a33d27f178e855fdd92","sha256":"ef132131d23eb3df7a820e7ce3fb9ce2db102da2fbaaa34d00ca88664d524a3a","sha512":"409727a217f5deb67975099745516b7bf25138d44f38008287e1bacc43364c9c2dc885e74686a5be4f2e101735f278e3138b47a88fbb74f8dbb1bf87a4c50282","ssdeep":"","tlshash":"822141c1af42cc7ffd24dc76843402a23d6508aa06cba3d074d9b12b9a8090d87e9c91","first_seen":"2024-08-02T10:43:54Z","last_seen":"2026-08-14T03:00:11.976569Z","times_seen":98,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www-ledger-app.live/assets/main/Ledger_favicon.png","fqdn":"www-ledger-app.live","domain":"www-ledger-app.live","tld":"live"},"ip":{"addr":"172.67.155.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:52:00.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-ledger-app.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:31:47 GMT","end":"Fri, 17 Jul 2026 13:31:46 GMT"},"fingerprint":{"sha1":"CA:7C:1B:5A:99:BE:BF:39:A8:14:5C:9A:9C:5E:70:5B:A3:8D:36:61","sha256":"AD:EB:74:85:9E:3A:B0:00:2F:05:34:F2:7F:FE:8B:D4:66:A9:50:52:C1:69:BB:35:57:25:DB:25:A8:08:75:E5"}}},"request":{"raw":"GET /assets/main/Ledger_favicon.png HTTP/1.1\r\nHost: www-ledger-app.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/app\r\nCookie: _ga_RR2HDMWQGK=GS2.1.s1777038720$o1$g0$t1777038720$j60$l0$h0; _ga=GA1.1.1314911150.1777038720\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 24 Apr 2026 13:52:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 1207\r\nlast-modified: Fri, 03 Apr 2026 21:07:24 GMT\r\netag: \"4b7-64e94b4285ea2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmJ%2BrwRuQV4ulNq6fqYHXhUA0RuMy6cgIb3rruNSK3sjHMlSyt4pQKau5BMijMo7OcLhW8GNFjU2vkxhFXDATRl68y%2B4uV69y%2BRhvYh55s%2FIP8egi0MiUBhUZ4hiUn1HyKG%2FUrnC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f1596047dbe56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"e77d6e15aaa797a66863f59181f9b1ab","sha1":"833ae9dceeeb335bcfbc8a33d27f178e855fdd92","sha256":"ef132131d23eb3df7a820e7ce3fb9ce2db102da2fbaaa34d00ca88664d524a3a","sha512":"409727a217f5deb67975099745516b7bf25138d44f38008287e1bacc43364c9c2dc885e74686a5be4f2e101735f278e3138b47a88fbb74f8dbb1bf87a4c50282","ssdeep":"","tlshash":"822141c1af42cc7ffd24dc76843402a23d6508aa06cba3d074d9b12b9a8090d87e9c91","first_seen":"2024-08-02T10:43:54Z","last_seen":"2026-08-14T03:00:11.976569Z","times_seen":98,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-24","alert":"Sinkholed","trigger":"www-ledger-app.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-24","alert":"Phishing Block","trigger":"www-ledger-app.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Mono:wght@300;400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www-ledger-app.live/app","date":"2026-04-24T13:51:59.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=DM+Mono:wght@300;400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www-ledger-app.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 24 Apr 2026 13:51:59 GMT\r\ndate: Fri, 24 Apr 2026 13:51:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2524,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"56396ae5cedc2612331e22240fd4604d","sha1":"fc247e5d55832d2398f10042a69118b5c9d017db","sha256":"4390c204c03cba7c47b8341040c4bdf4bf7f3cd04e49b9a63c94c82d7930f0a4","sha512":"f8696331b34838fc27417b76516395995e6c9c89a58f395e2c7f2ed889bed5300364619b0a54b51c69c3e8c46172e7746b17f75def1534e4906a636efd3c006e","ssdeep":"","tlshash":"a1510391047fa100eb931dc112cebe37ef1e61919455c938aefe2498bc5bd26835175d","first_seen":"2025-09-22T15:28:15.427115Z","last_seen":"2026-08-07T11:09:48.785296Z","times_seen":30,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":87,"dns":0,"connect":31,"send":0,"wait":34,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}