{"report_id":"2fcb77cc-27e5-4d7a-be1c-b8000f0f2a67","version":6,"status":"done","tags":[],"date":"2026-04-21T08:34:24Z","url":{"schema":"https","addr":"ledgersetup.info","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"172.67.215.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ledgersetup.info/","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"title":"Ledger setup","dom":{"size":12369,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3506)","md5":"289fe27a928099b189c6542f053a100c","sha1":"2cbed1c725ee1a51a8e1795ae9cd72216675158c","sha256":"fdaaada3569807a651db8bb3b2d7f7b394045bc03410483389e93bc0eba98b68","sha512":"3cd92be6850b78ef3cefcb13a2849b090d72e9d5a1cb16480acf9f612b03189ad331ac9863e02e51c771fc6aa9169e3e82b733340dfd2c25f9c57ec35eab3425","ssdeep":"384:JTj0CZD2/vnJd0JdUJ35JBVJTJJZ1JXw5Jz0F/7:JTj0CZD23Ks9jVHwv0J","tlshash":"624263b041934a2f5253a0e56860df4e75d8d747eb5f8c08f3bd0ae72fc9c969a23198","dom_hash":"domhash403cf4ce1b2483b67b9907e5f73924f7","first_seen":"2026-04-21T08:34:32.237506Z","last_seen":"2026-04-21T08:34:32.237506Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ledgersetup.info","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"172.67.215.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T08:34:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgersetup.info","ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T08:34:24.540067Z","last_seen":"2026-04-21T08:34:24.540067Z","alert_count":10,"request_count":10,"received_data":647642,"sent_data":4736,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-04-16T10:59:51.808219Z","alert_count":0,"request_count":8,"received_data":8234,"sent_data":3456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-04-19T23:27:37.109257Z","alert_count":0,"request_count":1,"received_data":90462,"sent_data":445,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-12T07:08:10.865392Z","times_seen":266452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/js/index.js","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16a47ac28b9edfa697e0f8e49d4060b4","sha1":"e7111bddfc992c3bdefe49a8d08a177eb50314a2","sha256":"56a7c8af8ae36dc75de55bfbbbbdb30190e8cd33b379919dd345b6c8a3c51be4","sha512":"98d749837ff848646daff6fa0211cb464621071ddb60521157d9ce185bf1cff1146ae7ce2dde0566e135033caac139483aae64c7eda82bb5d05c44525884610f","ssdeep":"","tlshash":"61e02695e527794e8632bf71b82644006ea9403157135a00fa9d49d5dd3e725386cccd","size":335,"data":"","first_seen":"2026-04-21T08:34:32.243495Z","last_seen":"2026-04-21T08:34:32.243495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/js/lang.js","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02eb3d28e08973de9a0406384f7904e6","sha1":"a21af42ea1132f69017880b9de1bb1af82a375e5","sha256":"462faafeb805023950354c77ff8dae6b7adf9bdf0688b8b95000d3fd45c63ca7","sha512":"ae0a12fae646f9433453b5cf9a78499cde26d5010499caa94bee2708b0800983ecd0bea8c17fedbff2b02f529b511ea9dec6e926ed89c5c9606b466d3c81d47c","ssdeep":"768:Y4QDSLjyojnt/vYG6GTMfFTqrSCbpOhMZV:1Q3E/vYlGTgCIhu","tlshash":"7e1366178599043c85fbe399a8504942f71f1b2f4384522f783c92987fb6825f2b6deb","size":43990,"data":"","first_seen":"2026-04-21T08:34:32.267943Z","last_seen":"2026-04-21T08:34:32.267943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgersetup.info/assets/js/index.js","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/js/index.js HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Mar 2026 02:19:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69be003a-14f\"\r\nexpires: Wed, 22 Apr 2026 08:34:05 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrlDDuEsXpJ6bZL%2FHJPXQ30qXgF%2FAZjD%2BvrlnORoY3XYsjS4v89D8Ex2cPnwlwX1T5j10OqUNMhI4uwDLIVy8E%2BpbTC9FZY8DHRLnTM0%2BKkQtfvgkynw1YISfkU%2Brpy4Tu0K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c24e9a51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"16a47ac28b9edfa697e0f8e49d4060b4","sha1":"e7111bddfc992c3bdefe49a8d08a177eb50314a2","sha256":"56a7c8af8ae36dc75de55bfbbbbdb30190e8cd33b379919dd345b6c8a3c51be4","sha512":"98d749837ff848646daff6fa0211cb464621071ddb60521157d9ce185bf1cff1146ae7ce2dde0566e135033caac139483aae64c7eda82bb5d05c44525884610f","ssdeep":"","tlshash":"61e02695e527794e8632bf71b82644006ea9403157135a00fa9d49d5dd3e725386cccd","first_seen":"2026-04-21T08:34:32.243495Z","last_seen":"2026-04-21T08:34:32.243495Z","times_seen":1,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":744,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/img/hero-home.mp4","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/img/hero-home.mp4 HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14310232\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 05:10:40 GMT\r\netag: \"da5b58-64b12358a1400\"\r\ncontent-range: bytes 0-14310231/14310232\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FcGptK232Bz7Wdw6KiPLbyg4x1m6I4IgvsN9AMPujn27XhTm3xwalMUO%2BgIHDbk%2B4IC6TMIUXUJsUyYHWAUuDLsL6pGmW3ZFk9i6dEY%2FLYgloTBGbq2fBiJ3MILq49l3cTq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c2529b71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48908,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"6d52b893921958701a8be1698cfb4459","sha1":"b1d82d2b3c7549feb1ff6fec38859a55202b9c5f","sha256":"2dc6960e9dd89ca9c6061d77a92a0bc03fba2cbaf82019bb79456e0d4b74fdf1","sha512":"d8a75ab65e8f76ca192dedf4a42a9b57956813ce90b90179f1a43f2ea959a029b2dbf181c37a1d3e870f0d4d0426cfad84c4d16a283cda8ab8f83302e3c92998","ssdeep":"768:oQgnOPkQcF82+cHTbSXiEl3t5ZzsPQ6cKal25HgwM+sROdLLfbIrNAP1so4wY:InOPrUH7TbSio5ZzZT8FsRODbIpDXwY","tlshash":"9f23010258502bceaccaa637a369ef67298853c4004d60ad4b5920f749e56b7803edfb","first_seen":"2026-04-21T08:34:32.246195Z","last_seen":"2026-04-21T08:34:32.246195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":883,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/img/hero-home.mp4","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:04.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/img/hero-home.mp4 HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=14286848-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 23384\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 05:10:40 GMT\r\netag: \"da5b58-64b12358a1400\"\r\nage: 0\r\ncontent-range: bytes 14286848-14310231/14310232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWOBxD0asC5Jo6ZkjyAd6r%2F0kIONZaHkGbb4pFwu8fM%2FyO8u9Mf4lNyL3pW7RLL2IuipL%2FgnfO1uvjdnZklGpDy6fsE4spi4LRGX%2B2gEhgpYrazEhnxyzpz%2FOAAe6yOVNpoq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c2afaf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23384,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"13fe53294e785549138f9fb14887c0e8","sha1":"6e00b952cc641ac5d046c6c666db796dd5dcb5f8","sha256":"0c649e116a177b7330d8e9ec9d98aa635ea1cd206ee1e52050094b2358d38868","sha512":"f79c77a8e7697f79fb4db40429712634cd7cbed5aaf50c9fbc2a6e22b41060bb2b65a5cf38409e9e5e232be74dc0744c2d8f2823c3b9c460f4b2f97fff086591","ssdeep":"384:GJOBKIuDWZ8hVQKrrcy7Kls7REg2D+abryolFJLoj5aov1eeX6aDdwqOL4Zc:GJaKyZ8fQKrrcFluEg2vbG8Cz/XrOL4e","tlshash":"03b2aef453190b5be313177097d6273437b2deb5ab4be607669902220c783d58ea0aea","first_seen":"2026-04-21T08:34:32.249234Z","last_seen":"2026-04-21T08:34:32.249234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":720,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/css/main.css","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 15:03:42 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69a99b4e-1a793\"\r\nexpires: Wed, 22 Apr 2026 08:34:05 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HA0pITZM6AHsle7JlGurlManvoiYSkHIzZrfur2zvhsayJdEhWUXHdK9fs%2FbIGoPhISy81pXAtpwgjqkGCXs%2FlKG8F4dw0GBzJ0OmaAuKO%2BeLEHJyEx79Q1TR38hHzlGUdlW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c24c9a01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7e7cd5132e998a657c0c455183934b7c","sha1":"f0bf05181e7f1ecd1553945f03d063e5afb69868","sha256":"e2607cfcb34f4d0cc1a21707a65ef80398ce9846c3606bb503420b738f9101c6","sha512":"40e21a797115e8cffe3dbd2c9e628c20d614bf94ce3376f1fad924459d98a7dddd9ffa9b263bf642e0333e3f1648add45db8861477d07683bc85874af3a1d391","ssdeep":"768:lCB93CMcrxIRl0ssHe4EKsnbGXqNrXlnqPWxMthbFzGheTCSTbU:S3CM+IRl0ubKIVnqPWxMthbF0eTCQw","tlshash":"22b37200a517906b6e336af993e8659df90d70e38c3f1a687fc990111ff26f469a6d0c","first_seen":"2026-04-21T08:34:32.252128Z","last_seen":"2026-04-21T08:34:32.252128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 288\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-120\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 353426\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0fyJ6sL9Cm3Vf2AHLyGKEEjB2IDMuFti%2BZn6Aw4l6p%2F4KNGEH%2Bed9iUwqwpJn2Ut3z2ZYbRHxCtqhu3dBZJCc5gKf%2BPamCaN5xGAE6u%2BckDlAYTEgcd1vB%2FIoLOWA%3D%3D\"}]}\r\ncf-ray: 9efb0c253f79b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"5f94d206a4956ec58c461b2520f12887","sha1":"b8c3380dd5a5243098bbc6c99b309f549f6e99e4","sha256":"e2e39a14b87527ab4893d3f17510fcf2d12c6078f15289a2289a6b96da0d7098","sha512":"ea3a151f671611f444a92d28f4a75336871e051db9650a5796d10fd6953afd4d909ed0a72019c593c4ab349a37e1fa645b9034ebe2c8e51789c13bc924425b50","ssdeep":"","tlshash":"c2d027f57b7e2c28f9c5772b09114076d51a519d1b174716374cb4711f414d76495343","first_seen":"2023-12-03T06:20:21Z","last_seen":"2026-08-11T20:42:58.408204Z","times_seen":850,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":59,"dns":2,"connect":1,"send":0,"wait":8,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 381\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-17d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 614579\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNqs2fiEyBuOLQRDeZRLjtQE2RMQ270lcHJgK9D402vbcrZSNtk1crnyhyCdR3pRfpnNiNgb8nqS5jdD6VHL1debqCYQetVKMi4b13bV6V2m4Br70hLKUc4%2Bovg%2Fzw%3D%3D\"}]}\r\ncf-ray: 9efb0c253f8db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"adf690d495cb81a5ffd3abe9893b0f72","sha1":"dcc3b37c7a1f993fd7a62421ed5ec3b415d92fcc","sha256":"5a56dcaa46c8322da58e08ac0163f44e4f036fc82b866f7c2608f02e31ce0641","sha512":"5c305d85893cfa9d05924fe811e8fa4bc7b0c70883456bc204e406c1a8b9b67529785a288910e0658d4e2d6b3de688ccf0c0fd9b4bd7bc09085ef2d06b10f3b7","ssdeep":"","tlshash":"4ee0f1cca5ae0c2ba9d440625c68a25cf42a390723031e2cb18ec8c65649099088c105","first_seen":"2025-07-04T08:06:50.026505Z","last_seen":"2026-08-11T12:33:10.24889Z","times_seen":443,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 112\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-70\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 526925\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MIAUAmtpGlO0dl%2FpNN7ivqbPU%2Bx0ui9VXhG7HljILSEQL4KRSgzyYg%2F5ZvsTOLzdkvfNE%2BQQDYqq3jeqLpNVMT85V9LJMxmSlVeq3TGsRrTJhKh8VghEaU%2Bv%2BGSzZQ%3D%3D\"}]}\r\ncf-ray: 9efb0c254f92b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"c489137a2e2358b55b00ecd4e6c48f52","sha1":"b3904337d1e042782b5eec1cfd8575adb6ba3452","sha256":"13ac00068b4541fdac777c9710eea64044c365df6a72a1a94bc0c5765b8ba123","sha512":"4310bdd00e8dff466cfc2a4435f6b445e92f7a5c82055420ce4e877896fed32bb0487753f4dc3479db62bef3a15ca003f41d6a9562322c5a0709e95b10c9a682","ssdeep":"","tlshash":"3ab012c2b35cbd38878b1167842c91089976236f06b8c6fa650a85142b5204f85c9e9b","first_seen":"2025-02-12T08:32:15.804049Z","last_seen":"2026-08-11T12:16:24.431873Z","times_seen":274,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":65,"dns":2,"connect":8,"send":0,"wait":9,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 104\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-68\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2614268\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AljWv1R0epQvmQ0JRQYY0LrSI8MNragS1uyTmJVp47ZBpcAw9ZF%2F%2BX7%2FmPj1hDW%2FJJPigKCrjrho8TGkw8hntJ1nncFvBvi11d9RJKLMdLLH4FmKru88CXj%2FEYXB6A%3D%3D\"}]}\r\ncf-ray: 9efb0c253f7db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"0e977a4b2bb7d710ef6678345cc615d2","sha1":"d6a098d3b7e09f80e2604a466909237360ce29c2","sha256":"8ca56d0b54b7370d3c0cc2c631e24a0d1a0aca4e3f858dd2de64f175bb6fa70c","sha512":"05276196cb581c8ff99d2cc983251b8330f66b6832886bc1fc406e5093c727c9f41dbaecf85a5e7c14b170b97873495e1d9bf7d179dac46925226f680c0ff50e","ssdeep":"","tlshash":"68b012d3a6146c70c27a0773b10a1801dd193f181596164b7a1ac716630100dc0dcacf","first_seen":"2025-07-04T08:06:49.992173Z","last_seen":"2026-08-11T12:16:24.454141Z","times_seen":153,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 499\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 363951\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKFTHE1OlXSYVX%2F%2B452tqgHRSNDgEfE779bcmeGcrlGe9vTDKTdZJalhB%2BITxfSNsx402mDYL5GjIAJkwRErjtdNL9fO9%2Bmm971u5UNjlL%2F4cOOh3%2FVnWBspy2hJoQ%3D%3D\"}]}\r\ncf-ray: 9efb0c253f80b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"8176395cf82bc97230fc9fed4ac3f763","sha1":"b295f2eb61ee6e04ff8209fb48d1c69b3c6fc01b","sha256":"d7ea82a325a904b119f4d2cb6a405967bccc19ff2e0a8ccdc7ebaac29cc29f72","sha512":"29b32dfb4da1fda4f7e060809c75d5ccce8d2bf4ff5208015ec0b39eb3286c5f32e6f4a1a4d9a10d1ee77437af614133faa5376cef19e5331122ceb3f0c50a94","ssdeep":"","tlshash":"93f00ebe9a3f4e1ccb091211d32f484989322a58549b6367601905a89a010da82590cf","first_seen":"2025-07-04T08:06:49.887176Z","last_seen":"2026-08-11T12:33:10.247236Z","times_seen":216,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31021\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 10:07:59 GMT\r\nexpires: Mon, 19 Apr 2027 10:07:59 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 167165\r\nlast-modified: Fri, 08 May 2020 07:05:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-12T07:08:10.865392Z","times_seen":266452,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":353,"dns":16,"connect":15,"send":0,"wait":16,"receive":16,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/img/hero-home.mp4","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:05.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/img/hero-home.mp4 HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 14277464\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 05:10:40 GMT\r\netag: \"da5b58-64b12358a1400\"\r\nage: 0\r\ncontent-range: bytes 32768-14310231/14310232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYZmFrPYYUf609sMpugb7Z0EsS%2FWIwJFn1Vit38%2BF5eeWKd%2BB6uSBVuLyhzyZ1rEFd6iIz4BcT9wQi%2F2SrBQxrdHueqQAP%2BZVB9yTio52BSl4ttopTLmzlbksl6UypwYflg1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c2fccce1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248496,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"b6dc15a248ff6dc311e214dea5c17a7c","sha1":"8387c5af079eab3506c14717a05e70d4379516cd","sha256":"e1e7da9f5bf2a293c389477a27c5a45a46fd0237cede585e56f25990fc8a59b2","sha512":"8ac76efd8a0c93fe02dcb93439ef2e070c2dab1fc467123b8d3f122b2f3bed9c3ada3ac750094986eda1c3e7363b9e0643ad1b39189d468b50b38cc8e30efec2","ssdeep":"6144:TKOMEoafsm5FAnPHDN38WSFS3s0DC0jN2bOakgpNFGqJjMh6EL8cLZ:TKWoJm/APjNbd3u0jN2itgpNFGqJjMhl","tlshash":"863423e9a34b7f09765cea3b4589b3c097ca968f82613d9f0037706b9a8f4d051b11e7","first_seen":"2026-04-21T08:34:32.262651Z","last_seen":"2026-04-21T08:34:32.262651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T08:34:02.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 31 Mar 2026 12:27:14 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eg%2Bw3Y0ijUjhffYPEf1XOH5h7TQuM5bQ8f%2B8gZLaZsEAZwpNw7qqPDROiitXFPhJEtMryWznmnwJExMxmNnSD7b0yUnwOLJp2pTc%2Bbxi8rB89FHMo%2FRJNKDwe06RWDrAimN8\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9efb0c1ee84c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":12554,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3506), with CRLF line terminators","md5":"02094e2c66ebcd6e6b10164a4fc8f718","sha1":"9f7fa62ddf5aa56513fd053ab3c37540729b5bbc","sha256":"6ec68f3868c5306ea3563972e135a63164328eb81fb5db3689b85f1d8ed2e1c1","sha512":"8ec9b9051e150c48c0750ff6c843aebce92fc5677cfc520d85bc4bafc800380aeceb0ff2e0cebdd8715e1e6cfac6b251c182e8ac1082d9a17a0bba70068f3292","ssdeep":"384:x3qkldYYciJQnJQvJg0J44JceJo+JcR5JcZJbD:x3qkldYdSqt1frRoZ5","tlshash":"ae4262b041834a2f5273a0e558609b4ef5d9c34beb5bcc09b3bd17e72fe9c159a23198","first_seen":"2026-04-21T08:34:32.264748Z","last_seen":"2026-04-21T08:34:32.264748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":801,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 99\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1917345\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nti%2FXwmnRrFuLFpml7T0pwENMYfxk%2F6xzjNyyNC5i%2FeRkUXAQvWZB4Dzom1%2BZwTDxvfQO8uRppjYBGuxZldzKI9kOZ5duGTwUWJidYAFLZC5tFp4442JafjwItskkQ%3D%3D\"}]}\r\ncf-ray: 9efb0c253f86b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"52ce5902ed51d2db9393c9439c46b82c","sha1":"6cf73d922d72ac8fce47e6f494a04129d719483e","sha256":"4bf08b86243b0c5d79c196728100dd278a398ab57edaf56c871fceb9d879dbeb","sha512":"d1b9b9a226dfcd6a78015f4209da23e287052086df89bf2711ae407294c954c76102bc98faa0e7fce389584bf07d41a09a8470b657fb4443ce5cb1e383fe3f85","ssdeep":"","tlshash":"b1b012ee7154ac65d34c43331f028023ea61c12582155143a095d123051550883c4e9b","first_seen":"2025-02-01T01:01:45.04509Z","last_seen":"2026-08-11T16:11:18.180643Z","times_seen":437,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":62,"dns":3,"connect":1,"send":0,"wait":8,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 164\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 100610\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMjDMHYGmlZcf2zuF5abfvIDarHXUBv7nviGeaEEXDgy22CW2%2FCk4NnIn3q6HoCWuT2DD3wfliMbYhcEGwRPo5ingpo%2F99psg3zZr%2BuBLwMrLjVC%2F1yJi%2F7vuC9xmA%3D%3D\"}]}\r\ncf-ray: 9efb0c254f9db4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"9d9545b9ce771270e7a1a09765cc48b3","sha1":"bdfa440b450c434248da8e98daf25faa49e0b32e","sha256":"2b03bf0a83b55ad0d9ebe2576dddc0d1eee11ee8cb6476363e2649ce9baaf003","sha512":"74224e9d0ec0d6e2efd01835480673ffec46660303e9b2886335c9262d4300f6ce7a868d321d66519fc71ce355584f8aa08550180a6e6dba458c3f9501c6e8bf","ssdeep":"","tlshash":"e5c080c17fd55cb5d5c7657a2421402158f9345877452d0144545a1158d711c71c918b","first_seen":"2025-02-12T08:32:15.780066Z","last_seen":"2026-08-11T12:16:24.382068Z","times_seen":239,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":67,"dns":1,"connect":11,"send":0,"wait":9,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/js/lang.js","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/js/lang.js HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 21 Mar 2026 02:39:14 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69be04d2-abd6\"\r\nexpires: Wed, 22 Apr 2026 08:34:05 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByIzqPRWJgzgSupUAhCst8I6gKCT7ed%2F%2FZValqIBFHy2kQENcPiIiB1PjjE8oJ7SKKIqelY3jFesYqaKXkwdQvNXCjHnwqb98Dg0ZPVaOWBBoOsMZ8RN6JDjPiRHr3tPnOBp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c24e9a61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43990,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"02eb3d28e08973de9a0406384f7904e6","sha1":"a21af42ea1132f69017880b9de1bb1af82a375e5","sha256":"462faafeb805023950354c77ff8dae6b7adf9bdf0688b8b95000d3fd45c63ca7","sha512":"ae0a12fae646f9433453b5cf9a78499cde26d5010499caa94bee2708b0800983ecd0bea8c17fedbff2b02f529b511ea9dec6e926ed89c5c9606b466d3c81d47c","ssdeep":"768:Y4QDSLjyojnt/vYG6GTMfFTqrSCbpOhMZV:1Q3E/vYlGTgCIhu","tlshash":"7e1366178599043c85fbe399a8504942f71f1b2f4384522f783c92987fb6825f2b6deb","first_seen":"2026-04-21T08:34:32.267943Z","last_seen":"2026-04-21T08:34:32.267943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/favicon.ico","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:04.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2Fp2pScY1sEGHbMqNqwk%2FnT6jV512wihxQwXgtsxRmZ9J1ng%2BQgBf3Na8PNCFvLgB2NKK0bwCT63CDpp28lkOZxZrtOCtPEK1Rs0cvBvuCjWbAw9k8hqULw80bMKIrKZbhl3\"}]}\r\ncf-ray: 9efb0c2a8acb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"e6553ca1804b365d17671a2f71ffc931","sha1":"9b4629e35a43d24cd9614ea0dbc9b729c46c2fb4","sha256":"ac0196150b8658740b1c1d11104ed419e3db2c3292a31bcdfecd6bddf791cea5","sha512":"9efa930d45a5f2056bf74d36fdcec827c3e11d6eeab8114f45af4502d146d85ebf10a3d92da1580aeb83baaeb539c6190fbb0efba11c0fd38264b350cf839189","ssdeep":"","tlshash":"4de07d9e4053938b440125503dd566c53a4953eb746a82e82ac5c487514857dcca56c9","first_seen":"2026-04-21T08:34:32.269738Z","last_seen":"2026-04-21T08:34:32.269738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w40/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 08:34:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 98\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-62\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 268480\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAd2xHE0BOlzj6zKr5F6HNkvibKISm29VnXgzFqihIsx7ku6QeuWEhaJ%2Bly94WuMHCWO6oTO9GpTGBdWOPWNr8nsWNJ0tSYkfUogSjHt4ts7yXHmWE0JjzEHPknstA%3D%3D\"}]}\r\ncf-ray: 9efb0c255fabb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"ff792ee41b2c7ca1a07e3ed13e4a81a7","sha1":"a1b754f6d272423a13752616576db8015b35a21c","sha256":"7cf97156d1bf9045a798c475f59dcb75d541e7b8c6673ac8388507a9c5d548a8","sha512":"a5011e53b0c0e84edbe7b3cd64c336f3d716929547cd94c9025072f003609f047e1d545113172b96323fc6a9990da69abb4d5c14c86a9b7dbc5ad7cbb7c09cd1","ssdeep":"","tlshash":"41b012e55614adf0da641d3763184404ac211d610790044b1c15c835b022015d0e8746","first_seen":"2023-12-19T05:02:32Z","last_seen":"2026-08-11T12:16:24.412435Z","times_seen":213,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":73,"dns":0,"connect":11,"send":0,"wait":6,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/img/logo.png","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:03.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 14328\r\nlast-modified: Thu, 05 Mar 2026 15:07:26 GMT\r\npriority: u=4,i=?0\r\netag: \"69a99c2e-37f8\"\r\nexpires: Wed, 22 Apr 2026 08:34:05 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6tsgC%2BTtARIe1SKfXWARTWdKHOAzSKIUROKWi6oTzf0%2B%2B%2FKjz4Ixim7jLP0zA2sV7hKAEKtq2EmH3NBn%2FrevQH5KXgQAC%2BEIpWKv%2FnOc%2FmhBdpJB%2FTqkRU7Aq%2BzMrpiVPd5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c24d9a31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 98, 8-bit/color RGBA, non-interlaced","md5":"efc484c9cf0857d660ea262f69235950","sha1":"f1a48b031840b90c416387ce47928ced899f1d98","sha256":"b005f2c278967e317539212d8accfd9ec92bcf4302ac41224734300009935049","sha512":"c1e728cbbbd85477ed34a11e36f147aeb6299ddfcc4b1e91f11eb537366093550007905c7abccbab91f52f15a48652654a831ebc7825321cab16b5e42c87ab54","ssdeep":"384:5ra0cmU2zztqc0qHdF7dBySZysrlpoK4HdVJPWC:ha0G2P8jkdF7drrlpoXdVJPWC","tlshash":"7652c0f0b208a7aa64f161356d4bb3c079a5a537e4a20322d7d9b4ff06178222c6b7d4","first_seen":"2026-02-08T22:52:01.448034Z","last_seen":"2026-05-30T22:06:18.43802Z","times_seen":6,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgersetup.info/assets/img/hero-home.mp4","fqdn":"ledgersetup.info","domain":"ledgersetup.info","tld":"info"},"ip":{"addr":"104.21.24.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledgersetup.info/","date":"2026-04-21T08:34:05.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgersetup.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 20:03:07 GMT","end":"Fri, 29 May 2026 20:03:06 GMT"},"fingerprint":{"sha1":"C5:24:75:70:03:AB:A0:B3:FF:BC:33:1B:FB:A0:00:F5:10:12:4F:A2","sha256":"35:46:78:5A:34:98:6E:96:7A:02:F4:4C:B2:C5:1D:00:90:B0:16:0C:C0:D1:66:88:5F:91:56:D1:B6:25:28:42"}}},"request":{"raw":"GET /assets/img/hero-home.mp4 HTTP/1.1\r\nHost: ledgersetup.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=425984-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledgersetup.info/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 08:34:05 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 13884248\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 18 Feb 2026 05:10:40 GMT\r\netag: \"da5b58-64b12358a1400\"\r\nage: 0\r\ncontent-range: bytes 425984-14310231/14310232\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=erlKr0tjTfhraFKllgbLb7dkGIy3R%2FWWPewYLYm16LapCg1zgon7kL2B7YRW9bFe8c%2FuJuAKJMmHBGzeBJBR5pSZTadgJJqPYaVmD8EmWBbiGTcYAlgzQBe8Lo8i%2BEcQ90GK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efb0c2faccd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139656,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"fc720056a167595b2b84b43132cc0ef3","sha1":"a27d0409898abbf75654e40a7af157b8740c6d5d","sha256":"4b9b9ee50b881fe171deee401494f37255ed7f92bfbb668e14c33f3394bc3dbe","sha512":"065eb0c09fbd3c33c2086e729cbe7de82ff54c1a51c863d25980259d402860a8dd3f6dd06754e2af3867d15557cf86f7a295e42ed002740a878d832d374d7d0a","ssdeep":"3072:G55fIpgP1Nu30nOnYtNyn3/tN7z0piXfjtt19Z2:G5mKVnOnYvklN7hjtls","tlshash":"24d31283ac792a3dfe5119b78a36bee16d17119bd5549f4c5b185ec0a02c324ea83cf3","first_seen":"2026-04-21T08:34:32.274896Z","last_seen":"2026-04-21T08:34:32.274896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ledgersetup.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}