{"report_id":"46245597-0079-47ed-8263-64894db9180f","version":0,"status":"done","tags":[],"date":"2026-08-10T18:22:11Z","url":{"schema":"http","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"104.21.52.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"title":"Ledger Live","dom":{"size":1659135,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65251)","md5":"df07f303935f74555e58db7d57d68ef5","sha1":"ad454e0906a96f14fad7612e71a229024e1a746b","sha256":"7d9d1a0cdf279afbe325d3baa3bffac4f265076663fa855e78008d03a4d49ccf","sha512":"99af1d2425624c854683e44b5c29e8a8ff019dc45d0b6121a09a5c6630100ce0c7b2c9adabf621734d2f3f71ab143b7940af61ec098ecb839f06f722e9a1d57d","ssdeep":"12288:cBvDuSmboHCSr398+98E8l8O8+oCiYm64PjtcLDMMxafDn4kqT81Y+neQyXXFXoT:GvD9X3i+i7qte98xehFzBVBj6T","tlshash":"3e75d02a063202f8fb1a148ccbd33ca905e531a77fc904dcf97f58524f6969d271b9a9","dom_hash":"domhash6dbc7c6b881fc60f47f42bd9a29fd06a","first_seen":"2026-08-10T18:22:17.556149Z","last_seen":"2026-08-10T18:22:17.556149Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"104.21.52.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T18:22:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"css-style.com","ip":{"addr":"104.168.140.156","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-07-16T23:33:34.959146Z","last_seen":"2026-08-10T16:23:01.486054Z","alert_count":0,"request_count":1,"received_data":234,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"ledger-securedevice.com","ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-09","domain_rank":0,"first_seen":"2026-08-10T16:23:00.872508Z","last_seen":"2026-08-10T16:23:00.872508Z","alert_count":39,"request_count":13,"received_data":10044041,"sent_data":6710,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":2,"received_data":613100,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-08-07T02:39:10.154093Z","alert_count":0,"request_count":1,"received_data":14068,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-10T18:52:23.100941Z","times_seen":2337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"606270140712d2d4fbe977b1b51372e8","sha1":"18b4dc9017180ac91bdc295a6fa3a468745d2870","sha256":"0da5f32b1b6a8c2614bc470e1433b08451c6b8bd176af3f5a37b4c9f718fa251","sha512":"075edc28610c98c3ee0a744070f884a2a8f8ea90f2ba537a7854f62e0036843679cd3c308057e9ae070c4130577a3077a890ad4f7ba17cbdbff464417f4e5662","ssdeep":"","tlshash":"69b0128fb9fb01149bcaa0351037074d3738b0183a00174a3c3a05600a26dc4302ace4","size":107,"data":"","first_seen":"2026-08-10T16:23:08.245646Z","last_seen":"2026-08-10T18:52:23.113401Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"999910d8814e8e7a03dfd1e29f358c76","sha1":"8f1aade4e1f95f55542f8d906f81254c581fa840","sha256":"17d98f371f51669192575f2b37269fb5546fe7ce66482c714bbc121f40fbc490","sha512":"8351fdb853b98448381fb0a2a1a663a01fc1140a9b73f6c76a428cd6240868eeff744166723f0be45cea8e8ec2be06f35bcb9994e2d66be4fe427b8ab56dc2ea","ssdeep":"","tlshash":"8141506d71b72d34127bb3a31b4f66c17032004b3405e96a3e2c8b442fbda081aa37ed","size":2010,"data":"","first_seen":"2026-08-10T16:23:08.246646Z","last_seen":"2026-08-10T18:52:23.114346Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f9d8ef8d7b6dbb65027fb1354489160","sha1":"5af3a9d338e581828a40fcbfe7c2e8c24053221b","sha256":"5835ef70fa16f6f360e61aed99e54e41a91c0804e421d9bb91551cbc2b455bdc","sha512":"47ce4c9c29140335d1dc4eedf805402bb4f40b59b0453530fe456e44b64ddaa84db014915fe6e3fccc2cd91191d0e10e3259acad8af5c10d6bdff04e0a5baff8","ssdeep":"3072:Koz2ckNzTATzPNXMwhDv624jTusWc3S0HOtDthtOtgtE6mpR9U/aVuVFAiqNVYq7:Koz2ckNzTATzPNXMwhDv624jT913S0HD","tlshash":"4fc3fe1f097692e9fb166488c7833ce686d661a17fca09fccdbb8d024bb435d2306d65","size":121299,"data":"","first_seen":"2026-08-10T16:23:08.24768Z","last_seen":"2026-08-10T18:52:23.115345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63b0550ce4d77b7ca63d4564df9e20dd","sha1":"16c4e3bce2675f4f9ff0745d68c13216ddd8f622","sha256":"56dfcbc4878a8d50a23b18aa3f00f5457f0235ed088602e7b198e06a4f4dc79f","sha512":"8ef0d4823ff1bc829e7e7754bc771dbbdcb8bd83d5347f93528e485f0e68251daa95ff32d1c51ba905081ddafe46030be3fd7993b8d9377ab26cb89f07249877","ssdeep":"1536:0DgwQGNMpJGnZKccyvushuo05MMo4N5G+vXJNshK61ZD7DWMRaGMRa9J9If:0DgwQGNMpwcyvushuo05MMo4N5G+vXJ9","tlshash":"ac73d01f0a7652fafb1538498b8338e646e272613fcb08eccdbb5c154ba865d3306d65","size":76337,"data":"","first_seen":"2026-08-10T16:23:08.248762Z","last_seen":"2026-08-10T18:52:23.116314Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9ed05407d150113c25d39157799fc94","sha1":"e201569aebca9b3b508d0c7c173e5148e5d301ce","sha256":"7cf943583a3726fe90f464758c81a2851ac2dee1a8eb1783b1649a8094407f0b","sha512":"fe1d38861f32fc8f40ebfc5bc88656e390a631489cec9e7e8f21677cbac06190a9b059de2391a14d325131f6aaa18c5f73cc23718681e7443a45f17cef3a3d73","ssdeep":"384:LwhBZYjLehuiYsAI7UH7BTZXR4lXWB/zoj+HXPr23voEwgw:kqjzm2","tlshash":"6ca2206a36b725310aab31bbbbef9649353240033480e9497e6c86444f51fd06af7bd5","size":21556,"data":"","first_seen":"2026-08-10T16:23:08.24974Z","last_seen":"2026-08-10T18:52:23.11709Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/Track.js","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2302a16d57c006c294fe9a00b8e3aa1","sha1":"e2aae94f755034882d022277929bc8730725b6a2","sha256":"ffce51d65f7a4d9597309788795e07a7024ff08927fd41f343a42cd39211b978","sha512":"7f43bea6ff4110e1be2ec146a87d80190f5ecb2194a63d76ca58e60ad8136b661ad2cfe8b781f8123b5fd162c3efca86667882111d8162c99db0eb1bb2ad4f89","ssdeep":"","tlshash":"f571443804233e1b6abbb21a5d67660af263d11f6546cb367ffc4204af74a384694f4c","size":3566,"data":"","first_seen":"2026-08-10T16:23:08.230567Z","last_seen":"2026-08-10T18:52:23.108216Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/tabs.js","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10cf2bfa46d3ad5a0f2f2d8d3768e928","sha1":"9584824225a14ec362156d88e2c9eaea386577a7","sha256":"87874f1d76d26ff4fda1179e708968c31feeec522dfeda52c9fca95fb52813bc","sha512":"433629e8974c6b56e74a0b4389280f3ae6af92404734a92993610169abb2c502945ad080048dbdfcb1119cb1a90c862a79eda0996fef2b05651c9eb66b0e161c","ssdeep":"","tlshash":"5e4158cfa4e1143dc9f64fb1773b097a6af99460a9025340bbd444e368a0e752932ccf","size":2385,"data":"","first_seen":"2026-08-10T16:23:08.23985Z","last_seen":"2026-08-10T18:52:23.102426Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"","filename":"https://ledger-securedevice.com/","line_number":1624,"column_number":21},{"level":"error","text":"Error collecting user info:NetworkError when attempting to fetch resource.","filename":"https://ledger-securedevice.com/","line_number":1682,"column_number":29},{"level":"log","text":"BIP39 wordlist loaded with2048words","filename":"https://ledger-securedevice.com/","line_number":1695,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/pebble.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.433Z","timestamp":1786386100433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/pebble.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21853\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6m1vOhHzfSNZOaM5D7qPiF3Tc5ddd3LS1ikrBeW7OHmljt3c70Te0avUX39zKFhWENHkqcLJhoF0hlgf19jksQVvJcW%2FFXB1k%2BhFFmcWgLT6TgwNMf6w7z8AMokPTValtH3GhMmnx6AhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2910587bda9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 538297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":538297,"size_decoded":539067,"mime_type":"image/png","magic":"PNG image data, 1440 x 1680, 8-bit/color RGBA, non-interlaced","md5":"f2859ba015a0f0712889407d5199cf30","sha1":"d8751f42905235d43407359bf44acd3429872143","sha256":"527c6eb210a9e5ea295436e414abe58fe553ea5a2deaca9d7650aec1d49d943a","sha512":"65fc361de95c03bbe50e84c86ad5dd11b4b34d09b503d4655f046c1ca365557e67ca18457d2ffa8a5fee4b6424094d9c8a913e0556c2ce3d0dd37dbc758f4baa","ssdeep":"12288:kNA2itl9GwyDMP5ts8ScdmxVBVZnlYIpKuypkKwDc3:w1itl3yDMPbtzmxVBVZniMKV+0","tlshash":"e5b423ee87a7ca05ff8270f24449dea8cb64349a139b16c5400373297287aff5278e57","first_seen":"2025-09-29T19:36:32.574082Z","last_seen":"2026-08-10T18:52:23.106623Z","times_seen":12,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.437Z","timestamp":1786386100437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-securedevice.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VCiPzNdA4TQjyOPpvR%2Bw28Q7gSKc2EO2i6svoaewbxkFBDPwD%2FnUeHyP0CIPMcDaxXZQIk3AAWZCWLCLPAMOhmksBGkAEB8vvkvJdJcr%2Ft8j2MVZoAZ2eZsbvjo%2FFbLe4phIkOr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2910587dc4a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305543,"size_decoded":64684,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-10T18:52:23.100941Z","times_seen":2337,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/Track.js","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.439Z","timestamp":1786386100439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/Track.js HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Aug 2026 08:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 7153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxR2C6t7aRB6ZlmN0m1kq5nnDXEp6ctk6vvG4q2LrToiytI6lzDMsYhWLyusoGdR6qgmUJbvy3lS3F1t6AHmMlbNqbTy5a%2BfYpxE9AnNe65p0Z%2FV9AT%2Bu1wV%2F4Oz4eBwEHFAPi3AjDSeuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2910587bdabb4ed-OSL\r\ncontent-length: 1190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3566,"size_decoded":1974,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a2302a16d57c006c294fe9a00b8e3aa1","sha1":"e2aae94f755034882d022277929bc8730725b6a2","sha256":"ffce51d65f7a4d9597309788795e07a7024ff08927fd41f343a42cd39211b978","sha512":"7f43bea6ff4110e1be2ec146a87d80190f5ecb2194a63d76ca58e60ad8136b661ad2cfe8b781f8123b5fd162c3efca86667882111d8162c99db0eb1bb2ad4f89","ssdeep":"","tlshash":"f571443804233e1b6abbb21a5d67660af263d11f6546cb367ffc4204af74a384694f4c","first_seen":"2026-08-10T16:23:08.230567Z","last_seen":"2026-08-10T18:52:23.108216Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/summit.webm","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.473Z","timestamp":1786386100473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/summit.webm HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://ledger-securedevice.com/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncontent-type: video/webm\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\nage: 7153\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-5942186/5942187\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJA7ctIg4HcwFRwmAWe9h8kajnECvPZXL8YNhDc9j4emMXq%2FdYE%2FN565bTgOAzoMicCwXz2zMnvzd3utc%2F5dam7L5Oo7BJX%2BOCCgCnByIPEkGJHyHOAmfputRw8XHLwLRWWwOi0IH9qmxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2910587fdb3b4ed-OSL\r\ncontent-length: 5942187\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5942187,"size_decoded":5942942,"mime_type":"video/webm","magic":"WebM","md5":"10988b050abf34d353feab102b3818f6","sha1":"f2f811a00ea9e60d7b6a8036a23d4fdb90493bf1","sha256":"d652953ed77bc7c3183e8d1c81b4d21d24ed2bc9d2c6ef3f0168917ffeea6be8","sha512":"ae3435680cf90ad26c01c4b43b992ea2611731f58012d3b114cf04ba1ac8f5d74992ab07d2746c3574a171249eb218dc110176eec0b2f2c78f9c9a452b607ff2","ssdeep":"24576:wRPHRx5qVKg603NAFp3GSVn/sIAVv8ios1f7mrzwuAdtK:wRfRx5q1/+f3GSV/LS91DGzNmK","tlshash":"412533165f88bbe4c29987b1f357006f1f1e947d582d220adb9b2065ca44bbeddac04f","first_seen":"2025-08-07T11:40:32.793324Z","last_seen":"2026-08-10T18:52:23.099755Z","times_seen":20,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/marble.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.422Z","timestamp":1786386100422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/marble.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FzCO8TOfZ3pd8gL8s0GqFugKZ0cmw2fQZp1YZszQn6XPyiHG4jGki7stw%2FhFGNH%2BQP7EZAezp6vaHqSQM4jkV3VkAH2rF1gPYZJnDHDcxWhqCyfKcoIcDodJiNUFyN79SAlfq4HPwA9I4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a29105879da5b4ed-OSL\r\ncontent-length: 426754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":426754,"size_decoded":427526,"mime_type":"image/png","magic":"PNG image data, 960 x 1120, 8-bit/color RGBA, non-interlaced","md5":"3a0a79398001035a9d2cdd5262f23bf0","sha1":"bab1d1d8fe4e87b87ba1fc2c166a2f89054dded4","sha256":"79d8e86ef43845d73a67903bbf60afad80cde9414844e776a12387b1f4dd0aa5","sha512":"1e8503c8304707570341618789e513c70e6d2e46bee00ba91bf1e8d178a302549e303863fde9d769bed1d4bca42ae2e782bf078c086867f8f24e321bc4730f1f","ssdeep":"12288:b1sditJ61TSUx4Sud3+BtnClG4biw+UgOQkkzQzkxnLqI:b1sUe12kuE7nx4ewTI5wkpWI","tlshash":"849423e98c37ed603d62a2f19a659cd358f08c5d4dd84cb4d10c87396bdbebca4ea814","first_seen":"2025-09-29T19:36:32.584331Z","last_seen":"2026-08-10T18:52:23.103511Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/cobalt.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.424Z","timestamp":1786386100424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/cobalt.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OV8JcGPMRFg%2BcovuWhT1znt0m9YFzPIGBkUoaX6ZfTYzrSr2CO4EVsCIixOHBO%2BeueV7A4T5AiC%2BxTjgT18zflZs5CcLtVOiIUi7qk5IsQG4oWOhMwrMROR5e%2ByXUPJ4xa3DHIRMGBSKWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2910587ada6b4ed-OSL\r\ncontent-length: 177566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177566,"size_decoded":178340,"mime_type":"image/png","magic":"PNG image data, 960 x 1120, 8-bit/color RGBA, non-interlaced","md5":"3423d9216bd5559dec8b83b19cc29bee","sha1":"37c03fac2985177963c5bdf2447e86eca8984434","sha256":"d904a3d1ecef38cbd5c973379b889abcc203ae56a9ba50c78e0eec047a6d5904","sha512":"521c4a78d075b18bec5d48e2a8ff22c114fb92196707b35931a5da7b9ef4aa0a6fdc95e5f133e68bc7152eac2a33b62d596b742128994965d87977f5da29ca9d","ssdeep":"3072:PvZDVxTPxaYF77jICJ6agdTYbA84s7EMWPzWzhxiffyQdgA+u83G1QxlUd3SDG:PvVTPxn7/lhDAGE5WFaycTKG1QxlUx","tlshash":"2e04138ff6539c36be533627daf0657e3e994564c0be437911572b2bb31881c24e2ea0","first_seen":"2025-09-29T19:36:32.599074Z","last_seen":"2026-08-10T18:52:23.111712Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bitcoin/bips/master/bip-0039/english.txt","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:42.637Z","timestamp":1786386102637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 23:26:07 GMT","end":"Wed, 02 Sep 2026 23:26:06 GMT"},"fingerprint":{"sha1":"3F:87:BE:75:1A:02:3B:A4:D2:51:D2:72:92:A0:00:61:D1:D0:D7:12","sha256":"32:49:1B:26:BF:AF:7B:FB:55:60:29:EF:32:29:9A:C4:37:4D:B3:4D:09:EE:CD:4F:FD:01:F2:1B:2C:5A:85:67"}}},"request":{"raw":"GET /bitcoin/bips/master/bip-0039/english.txt HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ledger-securedevice.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-securedevice.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"a5d1c9e8297869cdc6e48c0ac63015d54e9275e637278b67ce58154d256f4087\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D026:10539C:9BD3D:10A5B3:6A7A0B06\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Mon, 10 Aug 2026 18:21:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786386103.667972,VS0,VE2\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: fa520b1451d0b386bf1aa2869c7c9fae2e90b57e\r\nexpires: Mon, 10 Aug 2026 18:26:42 GMT\r\nsource-age: 216\r\ncontent-length: 6246\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13116,"size_decoded":7198,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f23506956964fa69c98fa3fb5c8823b5","sha1":"b2d5241ae027a0e40f06a33d909809a190f210fe","sha256":"2f5eed53a4727b4bf8880d8f3f199efc90e58503646d9ff8eff3a2ed3b24dbda","sha512":"416c71ba30018ea292bb36cdc23c9329673485a8d8933266a9d9a7cc72153b8baed3d430f52eab4f5d3addf6583611b3777a50454599f1e42716f5f879621123","ssdeep":"192:DAvLtKog3W8jiD1/oLpsExUKqlyjn6SybkSoxIFg/7mSX30hB8OnqdE5HpF2gS2:MvLAog/I1wdsExXxigaSUvRj5r","tlshash":"e6421a78a360353bfacb5a8fdc983f51da444e336e0264e4f66d5645184bc86cb28d2b","first_seen":"2024-08-19T17:47:39.898911Z","last_seen":"2026-08-10T18:58:10.057427Z","times_seen":271,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":14,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/canvas.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.406Z","timestamp":1786386100406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/canvas.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rE1QMr%2FDYZp%2FjusRJij4CHh55AaZkCnF6hhEV2ywP2AcEwwQLRALaB5gtbyn1%2BHtfxWW5L1YYu8whqMyXp0jXqgvxzLK%2BRsXRxlDabFo%2BenB%2FX6xjzPApCJWaNeOjTbQIrS1PMnbWPwk0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a29105878da4b4ed-OSL\r\ncontent-length: 130525\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":130525,"size_decoded":131303,"mime_type":"image/png","magic":"PNG image data, 377 x 421, 8-bit/color RGBA, non-interlaced","md5":"ea5739db4934d8f08f1ff2088bc17097","sha1":"5fe878f4e863a73078f613a57168f7d8a414825f","sha256":"81843f9cc4473328e73b00603c1f8c7c42caf88834e5ce98cf4dc6ca95f1d385","sha512":"35ff3d09927f2c414971f8ce2a024d7a99a87e8fc1a34bcc3779c58bad7a7b5d105a028345e6bc402326c6cac3f810fb3161669fca8bffb4b94063712f604024","ssdeep":"1536:2JN9XBjIYqtU21YdA737kONwu+lQnFjd2JMRg2/1E0ebt5lPcGqMzNFmXWhouZEb:cR8k2V8Ou7lap+eW0ebtHKcpouckOgSJ","tlshash":"52d312c26a0b1d6f975805393d77286fc4a299aca04ff06625401f5fb86be32e2c55f3","first_seen":"2025-09-29T19:36:32.604562Z","last_seen":"2026-08-10T18:52:23.101709Z","times_seen":12,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/ripple.mp4","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.471Z","timestamp":1786386100471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/ripple.mp4 HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://ledger-securedevice.com/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ncontent-type: video/mp4\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\nage: 7153\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-26419/26420\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNCQLE0BE1mRuq9U5xWzN8wgKy%2BY29XVMCEdCD7Vs0nfSVBOnyanSjYKFSVYstjcVKDhIbydQLINichUsdE8elYxAYLMkyF0WOl%2FKewvZBBa20gXbH%2BqlGoJAeN4KiU5Yz05aaDAxgweVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2910587fdb2b4ed-OSL\r\ncontent-length: 26420\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26420,"size_decoded":27166,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"b16847de02c85b9a1044aa608ce48c3d","sha1":"1c09b3675c955b6ce17fe87a4847389622946b63","sha256":"fc80ce85ef11ccd942a1db0612d60cd941655d07f9e6a22c2b9191ed409c972c","sha512":"528f87c35168ab3492594c71f2e64315a0fb52bc8907b7b44ff4e8add89cb84237a439c5237d068e7aff1581f02481cbcd309aa1ae15926e3496e50b6b6f4c67","ssdeep":"384:cpUlJ0Q5/GfSDG0jmRb7cAtugrBGk2Syi0SV/I+WqPaXTRjRHbCPy1ZYWKA+L0Zw:y1TXQcPGlNdRC0QvirSQE","tlshash":"46c2ad8a97b499c3d92d923c8cb7d306f318e6d8670693cbc7607265fd319accda0585","first_seen":"2025-09-29T19:36:32.607113Z","last_seen":"2026-08-10T18:52:23.109895Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/meadow.jpg","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:41.940Z","timestamp":1786386101940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/meadow.jpg HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:32 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJ6hahuVlkY0Ysi9yGR1EdCDZ320zH3%2Fx3%2BKvOrgukebZ%2FRvwX4EmCMMF9APFJzv03aYl%2BM%2FxqV8ADjoD8bt%2B2SnCemhhp7lLAIvNajJyTuo663r0iRkH6j0JfaAeADa19ALqOct8zYt7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a29105911e0bb4ed-OSL\r\ncontent-length: 16729\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16729,"size_decoded":17510,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=PhotoFiltre 7, datetime=2025:04:29 04:55:18], baseline, precision 8, 716x646, components 3","md5":"b205f8d66c2573e5c5282531cbf52491","sha1":"658b89462743d0d28bc597de5f2c81766649c7f1","sha256":"e873d5d375bc249a7912a50c283f891fb6df0fd3265957b21642185f9bcc2193","sha512":"0c19cbc4d3962e7af7efc783597b80aae491e762cec77716381d92f76d21e0ade5a6e065f93b5310a784f764054880977694f4e7245a84beccafbcf39eb221db","ssdeep":"192:pYDj3jeUuOOGVos57fkMlxfSoeov84AMwOBdtG9xjwL3nHEbZR2sQk:pYDrj3nJpfkg9b9vXBy9xjwL3E9R2Zk","tlshash":"ee72f00389495ec3a46cc7e5bf074ed86f49675de8863eef04625f873b612231d8a02e","first_seen":"2025-07-31T03:28:11.020601Z","last_seen":"2026-08-10T18:52:23.104415Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/ember.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.425Z","timestamp":1786386100425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/ember.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6P1%2BC%2FemxKjrygXlY7Bp8VC12brRuKgqoIkmxxYgAI8laZIde1hnV6Sv5OLnpCHiRxP9kIn6bVkOeQ8%2FZjYddq0ZyGTow1FYgb34JA8T0d45TN2ffTMKnK%2Fr0mRSHPiGJ7t1lP%2F6dgbpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2910587ada7b4ed-OSL\r\ncontent-length: 624878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624878,"size_decoded":625654,"mime_type":"image/png","magic":"PNG image data, 1440 x 1680, 8-bit/color RGBA, non-interlaced","md5":"cf176eb1d64bbff10703233876495a46","sha1":"5d5d052799695d694ed0ecf8637e2b2f3b0f6435","sha256":"2e2b32fd81a3ec43769f01548f285db098a133114c51b3a941422418c080f072","sha512":"dd381fbab96d0e395123e95be32cb6442007e7371d020cbdf3346b78ef2d82e5ae7bd393fce694423d8bb374a7aeaa08acb6b27e888f043c99ba0558858f6fc8","ssdeep":"12288:WX8yrBmhrr6tQotXFH8DX460906xmyaU+fh4A9pEuKsLZeoAwNPn1LlM1BMMhCN:CO4Hq6xmHUIh4UyHwQYR3M1BMmc","tlshash":"99d423a983b1cd88e04268bc18d71feb5ef744966bf405b6da0f4465be03af59a30d4c","first_seen":"2025-09-29T19:36:32.601957Z","last_seen":"2026-08-10T18:52:23.112412Z","times_seen":16,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/tabs.js","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.444Z","timestamp":1786386100444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/tabs.js HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 02 Aug 2026 08:51:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 7153\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kq0SUyKrdwP08DRE1s2YKXbwTcWynzqm0%2BquX8APtwGjTuzIeEN%2BjOVBfIX7a7Eeh%2FE4arW4w3nJz45Xkbyyy5dM6RaErKh9N73LNmuVIGypLEWKKvjqPWlRQheQku54IF4uXLER%2FaDE%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2910587cdacb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2385,"size_decoded":1245,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"10cf2bfa46d3ad5a0f2f2d8d3768e928","sha1":"9584824225a14ec362156d88e2c9eaea386577a7","sha256":"87874f1d76d26ff4fda1179e708968c31feeec522dfeda52c9fca95fb52813bc","sha512":"433629e8974c6b56e74a0b4389280f3ae6af92404734a92993610169abb2c502945ad080048dbdfcb1119cb1a90c862a79eda0996fef2b05651c9eb66b0e161c","ssdeep":"","tlshash":"5e4158cfa4e1143dc9f64fb1773b097a6af99460a9025340bbd444e368a0e752932ccf","first_seen":"2026-08-10T16:23:08.23985Z","last_seen":"2026-08-10T18:52:23.102426Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/horizon.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.462Z","timestamp":1786386100462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/horizon.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mmx1iyig%2BVNL6tmc62WG30rz97TMkdix0m%2Bg74XpOyDKxjyag%2B7mNvoyC2jWzy3OEopLY%2BOCCEDd0V4UF1wEpBJDP%2F4QIw8ypDPM56nkf72QEbaYjizfTmRo9V%2B2pKQhsT0r3fdr019mLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2910587edb1b4ed-OSL\r\ncontent-length: 149813\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":149813,"size_decoded":150591,"mime_type":"image/png","magic":"PNG image data, 1028 x 1028, 8-bit/color RGBA, non-interlaced","md5":"0a164a5d2989e5efc417f29de776bafd","sha1":"21921ad734ceea47cbddb362f9988f68a8be27fb","sha256":"21afe0f26f9bc486cc9de993a474e7aaf64f0728ae7686ca3a8d99dd43baa6a7","sha512":"f5104fb98b6814a598e9972da378d8f4241fa01b671413501ebbbcc45e8ed878526ad5864df91f9759a96cc288da65084bf887f3a9994e06170f457cefb6e8ad","ssdeep":"3072:dkVz1oGkRCJI/BMOWUuYeujB2FbjccNCMMo/9ehk2Uo7s:dkp1lksQBMWuYYjnyg9ehknN","tlshash":"0ce3122b5c0f7c9aceec16517dfa030b1a269b3727c275a3562936c4bf6d8b3b484149","first_seen":"2025-09-29T19:36:32.58018Z","last_seen":"2026-08-10T18:52:23.109101Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T18:21:39.758Z","timestamp":1786386099758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ndate: Mon, 10 Aug 2026 18:21:39 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdlQCysXvv%2FKcXh2sOguvPIWBkglJBWNNI1Sm81m27sbqtDnhoz1NCXCFhCnIaDwdrij5nVfoMwJt3Tyi%2B%2Fjb09gnTa151%2BF3ikfFKQTouy0EpE6jAD%2FWM5rPXEd%2B8zWYi7g%2FvVOgWbqAA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2910583bd57b4ed-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1473222,"size_decoded":745865,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65235), with CRLF line terminators","md5":"c50c6679f5205e14d0724ce47a8ff94a","sha1":"ce1c7bf18cb04fca77cdd8ae58fa6bebec646bb3","sha256":"53f171c74eb589fe0962ea5c0b601f73b94b3944716e1a088872614b49ed289a","sha512":"9305063baee9ffa1ef91a19b1821f43492c6d4d3749e0a5331bc36dcace96fe193cf56b3de3041864a3726404f7ee36c6a4a50567e3531441d10e7c89b34a650","ssdeep":"12288:rBvDuSmboHCSr398898E8l8O8RDHLDMMxdfDn4kqTa1Y+neQyXXFToz2cx:tvD9X3i8i7qt5GaxehFG","tlshash":"b3252326c612482ef23b95a82bc2b61efbc58253d2c142ed7ece51614ffb562057739c","first_seen":"2026-08-10T16:23:08.242926Z","last_seen":"2026-08-10T18:52:23.11091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":16,"connect":16,"send":0,"wait":181,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-securedevice.com/Folder/frost.png","fqdn":"ledger-securedevice.com","domain":"ledger-securedevice.com","tld":"com"},"ip":{"addr":"172.67.197.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.427Z","timestamp":1786386100427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger-securedevice.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 22:22:35 GMT","end":"Sat, 07 Nov 2026 23:19:58 GMT"},"fingerprint":{"sha1":"43:21:1F:C6:CD:9F:04:7F:22:9F:7A:CF:6A:B8:0B:67:72:79:7D:26","sha256":"82:7F:DD:56:C8:5F:B7:CF:CD:D4:EA:C2:69:A3:CC:7D:82:79:B4:D4:A7:5F:26:2D:91:A1:75:B4:80:1F:B3:12"}}},"request":{"raw":"GET /Folder/frost.png HTTP/1.1\r\nHost: ledger-securedevice.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledger-securedevice.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 12:17:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Aug 2026 23:41:04 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Mon, 10 Aug 2026 18:21:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 21855\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RopRRABETrnOqmtl8UuN5iXr8EfpJgS%2F02K2UcE6RbBRbidcFB5WvD2qj52UJ99QYSl%2B9kzGOGLkgQNU3INt7iNrUyC1gdhIwIvfL8aWTxxBima%2Bw0aUHdFFdT9Ks%2FseuWkvCDJFYwZWvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2910587ada8b4ed-OSL\r\ncontent-length: 521763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521763,"size_decoded":522537,"mime_type":"image/png","magic":"PNG image data, 1440 x 1680, 8-bit/color RGBA, non-interlaced","md5":"895d2c161d001507305b82100c536d82","sha1":"6c88ae9cea0d479fc1cc47ab582b1bd5cd54921f","sha256":"3e1941f3a5bf4a08013f553e8bbb4bfcf7def09069e5f817c76b57e4297892ec","sha512":"b2d4e9df98150e4e4ede3817ab214cff8a8aa44195d7c5d2fb9cc8a3f794f4c3e380cee3a572287b7e285e46750e3c42e7cd68e639efae0e4c751c608d26681e","ssdeep":"12288:6UHmx5mXy/AQr2CPRJOrxm4CgcbAcQbhGM0ACS8+WjnKY:omy/AQqCpQrOBscQdGMlCn+onKY","tlshash":"48b423ebda85a550e9840372ae812b108235705f466c495cf160f3b19b63efd7b09aff","first_seen":"2025-09-29T19:36:32.629389Z","last_seen":"2026-08-10T18:52:23.105508Z","times_seen":16,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"ledger-securedevice.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-10","alert":"Phishing Block","trigger":"ledger-securedevice.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"css-style.com/%66%6f%6e%74%2e%70%6e%67","fqdn":"css-style.com","domain":"css-style.com","tld":"com"},"ip":{"addr":"104.168.140.156","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:40.402Z","timestamp":1786386100402,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /%66%6f%6e%74%2e%70%6e%67 HTTP/1.1\r\nHost: css-style.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-securedevice.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Mon, 10 Aug 2026 18:21:42 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-securedevice.com/","date":"2026-08-10T18:21:42.415Z","timestamp":1786386102415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-securedevice.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 18:21:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByCotNLs2lj8uEGl5XKxWJ7Fl2pX4pg1rh%2FNYg3L5nYvWqDtHAan5%2FyxIxvDFXBi0oJu%2BbyZSQD2o9wKn5Y55Z0G8SrPMUdkRX1Qs%2BOzgrtdORUZi51X5vx4fnrPaJD8GFtFqUfD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2910594193732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305543,"size_decoded":64684,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-10T18:52:23.100941Z","times_seen":2337,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
