{"report_id":"3949fad1-0b0c-4690-a035-672ff3376570","version":6,"status":"done","tags":[],"date":"2026-03-17T08:45:14Z","url":{"schema":"https","addr":"www.ledgersupport-sync.com/","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"title":"Wallet - Ledger","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T08:45:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ledgersupport-sync.com","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":5,"received_data":3379167,"sent_data":2378,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/js/app-index.js","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f757af153c576ef33fde4a9c45ea066","sha1":"71202490524a10d3667db7a61967a0493694457d","sha256":"55a963c3f186141ca521e1ff5b9f1b0ceffb5ea2934ae5714e7a46085351ebc3","sha512":"8441afef9c20c64421a2810d6673fe61711566761a9697d570eaf99721222f6240ffbe63b90c49846efa3a2c11f2d8ca35a16eaa76c0acd44f2cf8ac57fc5bb3","ssdeep":"","tlshash":"9551ab082e721539dc932cae63ca95997f3e80039409c6917cfd921d8f506c06a79fd2","size":3118,"data":"","first_seen":"2026-03-17T08:45:18.428603Z","last_seen":"2026-03-17T08:47:12.801279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/js/app-index.js","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ledgersupport-sync.com/","date":"2026-03-17T08:44:53.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgersupport-sync.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 21:26:44 GMT","end":"Sun, 14 Jun 2026 21:26:43 GMT"},"fingerprint":{"sha1":"4D:B6:19:1B:FB:DA:AE:C9:96:2C:C4:44:DD:64:E0:0C:BB:1C:8A:7A","sha256":"7D:B1:6B:9E:35:A0:89:70:8A:22:4A:DA:1A:AC:1C:F7:0A:36:10:B8:37:C4:C9:63:EB:DB:9D:B7:8A:8A:B2:1F"}}},"request":{"raw":"GET /js/app-index.js HTTP/1.1\r\nHost: www.ledgersupport-sync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgersupport-sync.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"app-index.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 17 Mar 2026 08:44:53 GMT\r\netag: \"86ce899aa8206b892af805d36f609be5\"\r\nlast-modified: Tue, 17 Mar 2026 08:44:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r2drf-1773737093440-2ff9bc35fcc0\r\ncontent-length: 944\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3118,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4f757af153c576ef33fde4a9c45ea066","sha1":"71202490524a10d3667db7a61967a0493694457d","sha256":"55a963c3f186141ca521e1ff5b9f1b0ceffb5ea2934ae5714e7a46085351ebc3","sha512":"8441afef9c20c64421a2810d6673fe61711566761a9697d570eaf99721222f6240ffbe63b90c49846efa3a2c11f2d8ca35a16eaa76c0acd44f2cf8ac57fc5bb3","ssdeep":"","tlshash":"9551ab082e721539dc932cae63ca95997f3e80039409c6917cfd921d8f506c06a79fd2","first_seen":"2026-03-17T08:45:18.428603Z","last_seen":"2026-03-17T08:47:12.801279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/favicon.ico","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgersupport-sync.com/","date":"2026-03-17T08:44:53.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgersupport-sync.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 21:26:44 GMT","end":"Sun, 14 Jun 2026 21:26:43 GMT"},"fingerprint":{"sha1":"4D:B6:19:1B:FB:DA:AE:C9:96:2C:C4:44:DD:64:E0:0C:BB:1C:8A:7A","sha256":"7D:B1:6B:9E:35:A0:89:70:8A:22:4A:DA:1A:AC:1C:F7:0A:36:10:B8:37:C4:C9:63:EB:DB:9D:B7:8A:8A:B2:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ledgersupport-sync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgersupport-sync.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 17 Mar 2026 08:44:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::5ntf8-1773737094157-5743dcf1b010\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4cadadf67acb0a060e4b911ddaef2e30","sha1":"c052132cc3b79bc5cdc275e8774b702e5993e9bc","sha256":"a8d4b7379b4bf787d2bb9da316f8e03d9d7c3dff8740b1a2415085591bac7b60","sha512":"06a02f95bf9e391d8586b4b62a3ab7c66732cb203035ba9e5ca1eb8614e0fadd5e0ebc92f4b661a04a879b05ff5375a4c2044d9fb1afd375fda2f717aa84f9c8","ssdeep":"","tlshash":"81a0220e00828ccf33c0802028c30b3e08002832afe3fa008bcebb0ab0200cfbb000c0","first_seen":"2026-03-17T08:45:18.431195Z","last_seen":"2026-03-17T08:45:18.431195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":394,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T08:44:52.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgersupport-sync.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 21:26:44 GMT","end":"Sun, 14 Jun 2026 21:26:43 GMT"},"fingerprint":{"sha1":"4D:B6:19:1B:FB:DA:AE:C9:96:2C:C4:44:DD:64:E0:0C:BB:1C:8A:7A","sha256":"7D:B1:6B:9E:35:A0:89:70:8A:22:4A:DA:1A:AC:1C:F7:0A:36:10:B8:37:C4:C9:63:EB:DB:9D:B7:8A:8A:B2:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ledgersupport-sync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 17 Mar 2026 08:44:52 GMT\r\netag: \"a486f761cd8f1bc0efdbe93dc3cfe15a\"\r\nlast-modified: Tue, 17 Mar 2026 08:44:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t5c7n-1773737092873-2c5dc6b9a23e\r\ncontent-length: 1971\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a486f761cd8f1bc0efdbe93dc3cfe15a","sha1":"613029642c5cc47c7bf72400b4f635f7d7590e72","sha256":"9b8f57e872edad88828d9fb3fa4271c3af647f91531f9e31e242d3b076f04df3","sha512":"0e7c86037de2bb91069ad4fe898740416242ceb8fc9a89d3ba9090d88d542a59d3f90d6b88f93c90bcf27d6d046176c136fbab3547a46f5453a9de022e2a7d9e","ssdeep":"96:oNocO7EZuPW0YbXmOSme4Em7JzgDHYUSkCyJ04fTIN8q1:CocUEZuPW0Yb2lT4Em90D4UbCyJ9TC1","tlshash":"80e1c05b1ab31115a843e4a82fe727082764d407d31fcc6c7edd6298cfc66859da37c9","first_seen":"2026-03-17T08:45:18.433063Z","last_seen":"2026-03-17T08:47:12.799638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":93,"dns":32,"connect":5,"send":0,"wait":10,"receive":8,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/background.webm","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.ledgersupport-sync.com/","date":"2026-03-17T08:44:53.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgersupport-sync.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 21:26:44 GMT","end":"Sun, 14 Jun 2026 21:26:43 GMT"},"fingerprint":{"sha1":"4D:B6:19:1B:FB:DA:AE:C9:96:2C:C4:44:DD:64:E0:0C:BB:1C:8A:7A","sha256":"7D:B1:6B:9E:35:A0:89:70:8A:22:4A:DA:1A:AC:1C:F7:0A:36:10:B8:37:C4:C9:63:EB:DB:9D:B7:8A:8A:B2:1F"}}},"request":{"raw":"GET /background.webm HTTP/1.1\r\nHost: www.ledgersupport-sync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgersupport-sync.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"background.webm\"\r\ncontent-range: bytes 0-3351959/3351960\r\ncontent-type: video/webm\r\ndate: Tue, 17 Mar 2026 08:44:53 GMT\r\netag: \"f7bf0a7bc22e0f1bf1d53bc063fc98ab\"\r\nlast-modified: Tue, 17 Mar 2026 08:44:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ljww6-1773737093441-d8ddeb81a4c6\r\ncontent-length: 3351960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3351960,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"a796fdc3e09354566993f68b0de16a1a","sha1":"8605fbdf219eda8c649a8beadd829f4df25d4110","sha256":"ae3b1d388720f6867b6db14fef02320e781e65141d7d5296c538a566a90693ee","sha512":"81953707839406c7dbb1376e17b0356c61d2f040f2dbf5a2f1eeb6d224ee95d0485820a17bd4c91c6a57764342c03b1575fbfa3200b278427d77f751ef310329","ssdeep":"24576:hlqvnQ9MpC7YeghVnDMndb8eUJJLbOlls2SnM9h:h0fQ9MAuhVnDRZJJv4rSML","tlshash":"7b25338e9454d284e69757b3c78f2cb17a3a4d312c57f5ece0ea4a90937e43d9e01ac8","first_seen":"2026-02-08T22:52:01.452304Z","last_seen":"2026-07-23T18:37:52.435055Z","times_seen":8,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":687,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ledgersupport-sync.com/logo.png","fqdn":"www.ledgersupport-sync.com","domain":"ledgersupport-sync.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ledgersupport-sync.com/","date":"2026-03-17T08:44:53.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledgersupport-sync.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Mar 2026 21:26:44 GMT","end":"Sun, 14 Jun 2026 21:26:43 GMT"},"fingerprint":{"sha1":"4D:B6:19:1B:FB:DA:AE:C9:96:2C:C4:44:DD:64:E0:0C:BB:1C:8A:7A","sha256":"7D:B1:6B:9E:35:A0:89:70:8A:22:4A:DA:1A:AC:1C:F7:0A:36:10:B8:37:C4:C9:63:EB:DB:9D:B7:8A:8A:B2:1F"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: www.ledgersupport-sync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.ledgersupport-sync.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Tue, 17 Mar 2026 08:44:53 GMT\r\netag: \"efc484c9cf0857d660ea262f69235950\"\r\nlast-modified: Tue, 17 Mar 2026 08:44:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jkchs-1773737093434-089a14ae91ad\r\ncontent-length: 14328\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 98, 8-bit/color RGBA, non-interlaced","md5":"efc484c9cf0857d660ea262f69235950","sha1":"f1a48b031840b90c416387ce47928ced899f1d98","sha256":"b005f2c278967e317539212d8accfd9ec92bcf4302ac41224734300009935049","sha512":"c1e728cbbbd85477ed34a11e36f147aeb6299ddfcc4b1e91f11eb537366093550007905c7abccbab91f52f15a48652654a831ebc7825321cab16b5e42c87ab54","ssdeep":"384:5ra0cmU2zztqc0qHdF7dBySZysrlpoK4HdVJPWC:ha0G2P8jkdF7drrlpoXdVJPWC","tlshash":"7652c0f0b208a7aa64f161356d4bb3c079a5a537e4a20322d7d9b4ff06178222c6b7d4","first_seen":"2026-02-08T22:52:01.448034Z","last_seen":"2026-05-30T22:06:18.43802Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"www.ledgersupport-sync.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-17","alert":"Phishing Block","trigger":"www.ledgersupport-sync.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}