{"report_id":"3ce7cd8a-d9eb-41d8-a47f-7b1303aa30dd","version":6,"status":"done","tags":[],"date":"2025-08-13T07:05:59Z","url":{"schema":"http","addr":"us-ledger.to/","fqdn":"us-ledger.to","domain":"us-ledger.to","tld":"to"},"ip":{"addr":"190.115.24.11","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"www.www.us-ledger.to/","fqdn":"www.www.us-ledger.to","domain":"us-ledger.to","tld":"to"},"title":"Website 190.115.24.11 is ready. The content is to be added"},"submit":{"url":{"schema":"http","addr":"us-ledger.to/","fqdn":"us-ledger.to","domain":"us-ledger.to","tld":"to"},"ip":{"addr":"190.115.24.11","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-17T07:05:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-13","alert":"Sinkholed","trigger":"us-ledger.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-13","alert":"Sinkholed","trigger":"www.www.us-ledger.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-06T15:14:12.503348Z","alert_count":0,"request_count":1,"received_data":4676,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-06T15:10:32.619142Z","alert_count":0,"request_count":2,"received_data":67002,"sent_data":1078,"comment":"","tags":null,"fingerprints":null},{"fqdn":"us-ledger.to","ip":{"addr":"190.115.24.11","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-06-30T22:51:31.113711Z","last_seen":"2025-07-17T15:10:35.618167Z","alert_count":1,"request_count":1,"received_data":738,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"www.www.us-ledger.to","ip":{"addr":"190.115.24.11","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-08-13T07:05:59.36524Z","last_seen":"2025-08-13T07:05:59.36524Z","alert_count":1,"request_count":1,"received_data":12565,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.www.us-ledger.to/","fqdn":"www.www.us-ledger.to","domain":"us-ledger.to","tld":"to"},"ip":{"addr":"190.115.24.11","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"34ec5e40ed7cb4c3723e0cced2bf7b93","sha1":"1a00a273e02dfd5b1210e40b7b2354a716980722","sha256":"d4e66bf5d70885c09db396b29beda2fb47b47ff505ec5d0ce6f5a73facab16db","sha512":"67236dc7d5fd49297f03e14395000e4cb2bac54ca29138a494f26a43cb48dcf1338d2ff0805220eeaaafa7565a40ae64f2df37525b22ef3fe0b722fcb4b88837","ssdeep":"","tlshash":"5b01970f19a60834222ba43b98494e4125b1880f0e1ebac03a6fcd428f67c5029e77e6","size":764,"data":"","first_seen":"2025-02-07T16:52:39.691007Z","last_seen":"2026-01-29T02:45:02.626149Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"us-ledger.to/","fqdn":"us-ledger.to","domain":"us-ledger.to","tld":"to"},"ip":{"addr":"190.115.24.11","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-13T07:05:37.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"us-ledger.to","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Sun, 06 Jul 2025 11:08:34 GMT","end":"Sat, 04 Oct 2025 11:08:33 GMT"},"fingerprint":{"sha1":"59:59:41:B6:2E:D1:01:D1:5C:C4:4F:EB:4C:75:00:F1:F0:77:22:FB","sha256":"B2:9B:D6:4D:8D:5E:EE:71:71:66:7D:B4:24:5F:33:9E:6F:8A:31:9C:6E:DE:ED:27:A0:C4:09:27:AC:4B:90:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us-ledger.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=2rjgakhoVuw5PyU5; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:37 GMT\n__ddg10_=1755068737; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:37 GMT\n__ddg9_=91.90.42.154; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:37 GMT\n__ddg1_=sueOlrYGXch0FUBetyuz; Domain=.us-ledger.to; HttpOnly; Path=/; Expires=Thu, 13-Aug-2026 07:05:37 GMT\r\ndate: Wed, 13 Aug 2025 07:05:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":163,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f481697dc0666b4856b801314ae4b7f4","sha1":"fe5ab01d5e96f085af5afb1adaf56dae807bdb6f","sha256":"1e14dc7e8d3524181e0aa64a10dd20c037160b7c8c378e6d0d95b31ae20d7b82","sha512":"6fba4cb8eec407f20b7da0ead4ddae9a62c0bc72dd0396a2485f30a5b4daba1f3400b18f6d487df3201adbcae0ada364d51243775b61adae4b38bc3b83e21608","ssdeep":"","tlshash":"4dc02bd6a4f0e91a233113d05ed072110e0281c7d6810478f0cc229c0fa4f08cdc717f","first_seen":"2025-07-28T04:32:15.101545Z","last_seen":"2025-08-13T07:06:02.811005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":107,"dns":16,"connect":33,"send":0,"wait":271,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-13","alert":"Sinkholed","trigger":"us-ledger.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.www.us-ledger.to/","fqdn":"www.www.us-ledger.to","domain":"us-ledger.to","tld":"to"},"ip":{"addr":"190.115.24.11","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-13T07:05:37.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.us-ledger.to","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 22:55:36 GMT","end":"Mon, 27 Oct 2025 22:55:35 GMT"},"fingerprint":{"sha1":"01:4B:85:BF:50:B1:A0:19:23:72:02:FD:0D:00:D2:59:EF:BB:D7:32","sha256":"53:8A:62:6A:13:6E:B0:5D:0B:69:B7:0E:B8:6E:CA:EB:3A:EE:EC:89:F1:E1:10:76:70:DD:D9:A9:C7:C2:E3:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.www.us-ledger.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=2rjgakhoVuw5PyU5; __ddg10_=1755068737; __ddg9_=91.90.42.154; __ddg1_=sueOlrYGXch0FUBetyuz\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=i8Lk7ckU9CQZBFW1; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:38 GMT\n__ddg10_=1755068738; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:38 GMT\n__ddg9_=91.90.42.154; Domain=.us-ledger.to; Path=/; Expires=Wed, 13-Aug-2025 07:25:38 GMT\r\ndate: Wed, 13 Aug 2025 07:05:38 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":12113,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2331)","md5":"9a7d928bc3648d749827bc144a913493","sha1":"07bcb6935b4056a2e6bc3ea6456375cea549501f","sha256":"fd503cff57dd3251a5c736c5ed7fc81f7e7ed612a9fbc98f1871e474ad63836e","sha512":"81f95dd30ebcc58894fa49647f0d6217d4ad199c2f63b70d03eb13ec7773416928d30a70095408f3882365fa67c717571ef97b615b47f99725b90e342fc53780","ssdeep":"192:9k/dd7U8k/r1XRSGYYV+ZMD0NUP/iy9tnjuOS30vlcVbK4nrgbbfNso0XPoUwRK4:9kd1xGO36ZjMktcVGwsbbUBwRK9i5iY","tlshash":"644284fe239115b0bc16d6e1da2013a92d25e8fb5602c7b4f39c7e899fe909dcc5a4c0","first_seen":"2025-04-16T05:59:30.303897Z","last_seen":"2026-01-29T02:45:02.625484Z","times_seen":58,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":224,"dns":141,"connect":34,"send":0,"wait":192,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-13","alert":"Sinkholed","trigger":"www.www.us-ledger.to","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.www.us-ledger.to/","date":"2025-08-13T07:05:38.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.www.us-ledger.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 13 Aug 2025 07:05:38 GMT\r\ndate: Wed, 13 Aug 2025 07:05:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3990,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"994a405172d9c93e38fb2cd87536a0c1","sha1":"e8d1d1dae7218add97a87633b2538a1c325b26c4","sha256":"7848b91f8e2af969fc9294d5f63b07491a6e291c26dd9a08d378c01d92d36b3b","sha512":"6cd071bf80cc20cddfd4240d22129524d64441bb0b8e452aed4cb2d3ea29b036b463e1eff25a7fcb04b7b085221a8ab9ae2e9d150166dc1196d3e02aa0da3976","ssdeep":"","tlshash":"a181c0a204579400ea438dc233cfbf369d8f61556045c5ba6bfd1cd89ceac3a4316b4d","first_seen":"2025-04-07T17:47:02.219323Z","last_seen":"2025-09-02T01:03:12.803631Z","times_seen":186,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":192,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.www.us-ledger.to/","date":"2025-08-13T07:05:38.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.www.us-ledger.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:11:04 GMT\r\nexpires: Fri, 07 Aug 2026 18:11:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 478474\r\nlast-modified: Wed, 27 Apr 2022 16:04:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30480, version 1.0","md5":"0e7e5f9d3a8ef121149827180b790b5c","sha1":"0e9f9333078e5df9245630ff6f68ba1d9da3c403","sha256":"e8e147e15907f25cad69b2bcf060213efad4ed04e0d36374715cbca17b2afc1c","sha512":"e6fb4856d43ac4d2dda6b7fefc89fe5e8d446bbb3fe187cfe1f49c8e24cc5a76bab505d5b6e7e70b84caa67d0052f02b136a9e99b5637ae19873d382e0432a16","ssdeep":"768:YE3aTX6k4q5zBwxMiWJPq8+qYmAWE+5hbhPUI3I:YE3AiqZBwoy1qYTURpUI4","tlshash":"e2d2e1e716c4d3baded7187926d493c8c8b4c62e037047992ae759ce784b2178b18ec8","first_seen":"2023-04-05T14:50:14Z","last_seen":"2026-07-22T05:33:43.356223Z","times_seen":10109,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":81,"dns":1,"connect":14,"send":0,"wait":14,"receive":15,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.www.us-ledger.to/","date":"2025-08-13T07:05:38.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.www.us-ledger.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34852\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 18:22:57 GMT\r\nexpires: Fri, 07 Aug 2026 18:22:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477761\r\nlast-modified: Wed, 27 Apr 2022 16:31:23 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34852, version 1.0","md5":"0e8eefb4549a2edf26c560cb9845952e","sha1":"8d0b1718aacad934fd0043c87cbc54aa091396bf","sha256":"7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a","sha512":"237659dd4b8680ab4856d38290d57ae9211b479c51033d8db4ac61326551e33cc245ebf10eed35aab6854d8196d6651eb70cb63a2ba1d7373404851fe084772e","ssdeep":"768:zF+n1CXK5zIgArjvw2FiGzwrRnMiVPxhA31bgD8BgYyjAtJ:kAda5rRnMiVjAuDtYbtJ","tlshash":"c4f2f1e5b7a37d69c3f04922aa3e5761e4ca56eb0d60899b44438353bd6c0f02bd0268","first_seen":"2023-04-05T14:04:03Z","last_seen":"2026-07-22T12:48:43.766198Z","times_seen":27856,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":197,"dns":1,"connect":17,"send":0,"wait":14,"receive":8,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}