{"report_id":"4748451b-a667-4a1f-b2d9-389a3576cc46","version":6,"status":"done","tags":[],"date":"2025-07-29T10:38:14Z","url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"title":"Lеdgеr Livе: Моst Тrustеd \u0026 Sесurе"},"submit":{"url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-02T10:38:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"legder-live-apps.comimg","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"legder-live-apps.com","ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":19,"received_data":1248120,"sent_data":9185,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"legder-live-apps.comimg","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":0,"sent_data":922,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":3598,"first_seen":"2019-12-17T06:36:13Z","last_seen":"2025-07-25T12:32:40.451732Z","alert_count":0,"request_count":4,"received_data":172271,"sent_data":2102,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-23T15:14:05.350656Z","alert_count":0,"request_count":1,"received_data":390,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-23T15:24:39.672195Z","alert_count":0,"request_count":1,"received_data":692,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"legder-live-apps.comimg","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"legder-live-apps.com/23bf195ef9.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2e36baa01ecdd36f25cd142244dc841","sha1":"df483242eafc3f01feca717b72d5915ea0f2cca5","sha256":"ad6ca741d60174981a4d9fcdf2da9f61124da961fd8c21e7360163e0884652e3","sha512":"26d5868c643229913bf3de1a81ce672d0203d07e228b1f84521b6c41d13c22092a37a9294bc163616c87a3abb904686fc0a1c2d764e2470791e0bfd590508c40","ssdeep":"192:mWH6Kn0E9ZosvACp1mhWXAy1dxsFn7ZnPD8xIDz+mIjhwYXyl8XHDhVlzbCn:kwGCeh7hpgmIhwYXyl8XHvE","tlshash":"c832b3697690b1b24aeb31a1d03f620ff27635262006d060e71ddde46c7da6e9233f2d","size":11024,"data":"","first_seen":"2023-03-12T13:48:40Z","last_seen":"2025-07-29T10:38:22.352741Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48e8522a8ad75b761bad8a859f5dcae0","sha1":"6616d238a036421ed3fe2c9b1d46f4ba2b1e880d","sha256":"1bfa089bf8b779b11a6ce06c69d3d45fb86e516f59a54780dbb1efe67e2bdb85","sha512":"e670efbe62ae3df703c65540df8e7e2ac2de7f8e7a027454653acfc63c1ba5b379b80d0f2ea48e1d42ca2902e1b1035415651eb3e22feec25c504f10f0a730ed","ssdeep":"","tlshash":"0041c21b68d1aac8478913e67d2f40d5e376db5c508040a5318ef5827b78c3cdeda939","size":1939,"data":"","first_seen":"2024-12-20T06:20:43.851003Z","last_seen":"2025-07-29T10:38:22.37633Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","size":5537,"data":"","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-07-26T21:50:24.696792Z","times_seen":6244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"feeba8bf743b1ec33d88439f2f98cabe","sha1":"bedd47e73eb5f77b1a41b9afa306a0f4dd3ef5ce","sha256":"2f6f9091bcdb7210c8d9b81160c221b1d60e1a2c551f97222ab9495477e18808","sha512":"abfbce21888266965209b3302b0887ada6b1a4d06ed78d4a2b32ca9113d29ddf53736463a033b3c9fdc11af6801890df30a6ade4128b0750855613f832800b52","ssdeep":"","tlshash":"d441e00e7ee0a5d04386b375366b7186fa30e82c90544859706cf5f07fa2927dad6978","size":2173,"data":"","first_seen":"2024-12-20T06:20:43.852733Z","last_seen":"2025-07-29T10:38:22.377303Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-26T22:49:57.240387Z","times_seen":494421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/js/typeahead.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e1536eb90835be00978a222f70d03f","sha1":"3d0cfad8ac338dd4fb8c6596c1e50aa9451c80e6","sha256":"c385e2769bc98fa7ed35a78a01a4e647dede244e70275adf0d50f701f7df4e13","sha512":"515934eeba0e42e763dc61520c09247009a59835870971898f185ae97c57eb9827bed78e97624d517ce4ec9ee9438cf81c81a63313cf0f1caf1978c2a1ff1999","ssdeep":"768:zkvIAZ7pmmxb+d8xgjQNgDzZ4QShi+pFiP83OoE1F1kexuIx68jq4FkOf/GoVsNu:Upmm30m/U4IVeA2BzR7qkg","tlshash":"a05341847fd0645a17475bb9332ba5dae0da081e388d844bf211fca1b15a33bfaf5631","size":64548,"data":"","first_seen":"2024-01-07T22:03:38Z","last_seen":"2025-07-29T10:38:22.358222Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"legder-live-apps.com/img/ledgerstax.png","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/ledgerstax.png HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 13470\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Dec 2024 17:54:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67606943-349e\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTkUJTefMRrC8MP5RogIN%2B23I8cE1fAsLJoqohiVFb5RjRXu8VZCRG7O2ajNciX44sioBZH8msfzGTZPmU9%2FuK51pzVx7WYMjKsZ8cFHk8waeQ%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a86eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1240 x 511, 8-bit gray+alpha, non-interlaced","md5":"37d86f9cd3b587a79fad97ec79e899dd","sha1":"c8af3830c18c172e923cdb55ce00c3fe7519bdfe","sha256":"69a5bc575b8bec25dedf3bdd5ac1e9d5b8e816a3712c26ffd9ecdd3f68011251","sha512":"0c0618fe5a66cfd6364f70622cdd1a5bdfe7ad7640e31a83b7aa81cd235c2132accf509a197e60e8610b8f3b2b3ce497b8cf7a2f27d18e6baa62eb9bfeab05ba","ssdeep":"384:QhefMA9UINy3/Wk7tKy0P3oc65vC6NT3H6GB:QofMA9UINyekBn0voX5H6GB","tlshash":"a952afcd9dd6c9422d0e956db07c21f2f54ac475d2a5fecf29b8013b08943ba510ade5","first_seen":"2024-06-21T22:34:18Z","last_seen":"2026-07-24T03:02:25.603656Z","times_seen":437,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/recovery.svg","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/recovery.svg HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-e537\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vObrwa745gJ%2BukVURiFxrDQ79OYbfRjZEwIVWlP5cgh1zMZkXMyjRhp%2BGmwY5b0zlNGC%2FOJAWfLmrLheeGYdBmkbqj3iFMLFN7W6qufVpvje6w%3D%3D\"}]}\r\ncf-ray: 966bfbcd2ac5eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58679,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"655e9d5e222c9e9248e578aa8dd941ae","sha1":"2f81b22b4bc73f56876ce4b18242226d16e184d2","sha256":"ef9253942d3090dca2a37bea996baf9d0326c56b4eec73bead9b54c612c5a42a","sha512":"d5c8ab86687633a3ec947110a16ed6388a7f6943e3269a22360d8a8065dff3ca3c8b324122335eadb9cba74fb2952840132be8dcade142db08829638809183a6","ssdeep":"768:HEIiiTsbiw+3BMnKkUylUVgjJjkiH3UEomvq2A:VKWf","tlshash":"66437877430a6edbe94ac3549584209971d9e9ebf4f0a2c0b737391aed888d36c0d3d9","first_seen":"2023-11-03T20:50:53Z","last_seen":"2026-04-20T08:53:18.171908Z","times_seen":44,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.woff2","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/ajax/libs/font-awesome/6.1.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8iN5d4A3iB%2Fc0uKHt0TAMXu7gWzdWSWwCVdOfyR%2Bc7RlTNTfoyrEeranaYItUBiPGYInjDb%2FTQ%2Fg24qtWZDFzotAk6hiYb9qFyXwW28HEuotdVGkTArxcHPAtFvSZo6wHRSKlkWhYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 966bfbcf6baa92eb-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=32626\u0026min_rtt=26733\u0026rtt_var=11942\u0026sent=20\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=5546\u0026recv_bytes=2065\u0026delivery_rate=88609\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18090\u0026unsent_bytes=0\u0026cid=17efe8b322cec55e\u0026ts=795\u0026inflight_dur=154\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5254ba611422ac6977c89b5ffc73a36b","sha1":"c943dd95de4ba1d52c5ae3513813adc8e7e5145a","sha256":"ba49d3c7e405684479658a6492ccf47594b59dfb26ba8798687366439217094d","sha512":"068e49bb8904a8be9747dca75ca920fceed5decdeb8989fdce0d283773595a7bcd86aeff1e291f02f1327ca160989ca53523625148031d653f7601e3c3b4485e","ssdeep":"","tlshash":"78d0ebdf9053b38b0812005039c924d2264c13eaa42e86f82c83e483828863ecd8aacc","first_seen":"2025-07-29T10:38:22.344741Z","last_seen":"2025-07-29T10:38:22.344741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/offer.php","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-29T10:37:53.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /offer.php HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUsXMm8nmlOu%2BOY7272Eq9MSn2QCjiw%2BWehf%2BQshR0vEMZE5WCczdVvzBIGo9rEVRpYb%2BdnAIWNOslUQDSZazSEDMmgBPMuF5a752d5lytwMXA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 966bfbc9eba9eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469027,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11841)","md5":"0b62e2ff798e67e6560e04178edaa298","sha1":"2f46e74dab1fd3303b1c884af1caa16f11a5e226","sha256":"8804feefa26c9fcfe757554578a5cf55d20c11a68afef8f2215de8361ddc2678","sha512":"c4eb83789e1056c165a2e0626b07483c715b14c01f5bf7ab1e7ce59e86abd472a55650e5b72538ea30964a44096fd03a607d7b8486962d831dbdd63890dda0d4","ssdeep":"1536:zOMIQRu3tus67WQpDkficJk9RBsBm9RocEOFRM7/pHDkficJk9RBsBm9RocMOnU5:zQQkG7WcM7/K7WLGQPCjRdv","tlshash":"82a4967453e806f4e68e438ecbf53e1626a430db7be00144f23e52a29f66dd6643719e","first_seen":"2025-07-29T10:38:22.348258Z","last_seen":"2025-07-29T10:38:22.348258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":89,"dns":19,"connect":26,"send":0,"wait":242,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/css/responsive.css","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-415\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfY7e3QLpeG1B2AEAr65L7gnMJ%2BTKcDQOTD3%2FVSK4zxUr8sXc1eMV%2B3ugh0fKcCNMsbYnDVIlvgdvUesz%2BzhCu8vmh4jFS0%2BAIUC6Gl6NJr8Jw%3D%3D\"}]}\r\ncf-ray: 966bfbccfa4aeb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1045,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5e9dc33ae33033fdab5c72e663ec0513","sha1":"5dbf2985b2a796b1db65fbbb8fb767b643176979","sha256":"8de85b6d56b12a3bf0cad433cd5681b9f15d7eef0a0ae98c10f9d500c96f7475","sha512":"948afb390e6fddd729456d5d97b4dcf0f5cc775b21c01ab90afa4010353723344418abcbea3c60e87cb3ed8b33ef39e7efea3b238e0ee17ae9c34119f3e528b2","ssdeep":"","tlshash":"211103926ee60a48905b906d4dff2259734e1857b38e7dc27f443188cf997a680b3ac6","first_seen":"2023-11-03T20:50:53Z","last_seen":"2026-04-20T08:53:18.170181Z","times_seen":26,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/23bf195ef9.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /23bf195ef9.js HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-2b10\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtjtSzVCQcVQz7RBd82VcYmt62ffFZByWHZrggNtJTqQdSJwNUDW8xPBj%2BL9GsNlnu89TPt%2FaQk1LxVC2JMNYi%2FW%2FuDcF3IHnzwGGV1QwBny2A%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a76eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10594)","md5":"b2e36baa01ecdd36f25cd142244dc841","sha1":"df483242eafc3f01feca717b72d5915ea0f2cca5","sha256":"ad6ca741d60174981a4d9fcdf2da9f61124da961fd8c21e7360163e0884652e3","sha512":"26d5868c643229913bf3de1a81ce672d0203d07e228b1f84521b6c41d13c22092a37a9294bc163616c87a3abb904686fc0a1c2d764e2470791e0bfd590508c40","ssdeep":"192:mWH6Kn0E9ZosvACp1mhWXAy1dxsFn7ZnPD8xIDz+mIjhwYXyl8XHDhVlzbCn:kwGCeh7hpgmIhwYXyl8XHvE","tlshash":"c832b3697690b1b24aeb31a1d03f620ff27635262006d060e71ddde46c7da6e9233f2d","first_seen":"2023-03-12T13:48:40Z","last_seen":"2025-07-29T10:38:22.352741Z","times_seen":22,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/toastr.js/latest/toastr.min.js HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-15a1\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VAJrfMbkgXM7MqDH3kMKkC5YG%2FpR6XYeLa18tOK5GWKOUrENCV5eALyaGqG%2BY83Xf0BVv2Kr68iXwgUG1nSn45sQLafdvSnw9GGOjIZN3tvIhw%3D%3D\"}]}\r\ncf-ray: 966bfbcd2acbeb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-07-26T21:50:24.696792Z","times_seen":6244,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/pre_loader.gif","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/pre_loader.gif HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 186358\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"672dd5ca-2d7f6\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F5gx5isfCXfu5FeIbiW0RZk5iGCg%2FoE4u7BWR20j8bDKyDgaDcLarVqAbDwJyZVGVvxoz7qhrnlcXYQ%2FqGFemC40tj0r%2BqP7ooFQEPqndAbPQ%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a84eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186358,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 137 x 137","md5":"f961380518b6c57d53cd9007bc4136f0","sha1":"8b9cdd056cc2c2e77a6102518165c235e2472241","sha256":"cb2137010c62b477440e0afecdda3e54b5ad32a4a0d3c6acfd44bc452cd2b694","sha512":"eee90ffe357aabedd12dd72eb0b9653f99a16d5ce7640ee45c29b8eb9d7669449d00b1c5e73769f0bc1f5afeaa9473b2319c9c3709e03acdec3b0de846cd0632","ssdeep":"1536:YElN+dMuz7k+vrXmp7dpCx7A+6mhnD31qqVCQlRBXmhZC1SomXuMkZVEo2+om2:rNy79KyZJ7zlRB2hZC1So4k3m+om2","tlshash":"6d049d2396b285c5fc43b7b4311a9bb35f29cdc1a8ac6133a450bbc5c77276944a863f","first_seen":"2023-05-10T22:14:08Z","last_seen":"2026-06-01T17:33:09.012993Z","times_seen":170,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.comimg/pre_loader.gif","fqdn":"legder-live-apps.comimg","domain":"legder-live-apps.comimg","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.095Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pre_loader.gif HTTP/1.1\r\nHost: legder-live-apps.comimg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"legder-live-apps.comimg","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/js/typeahead.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /js/typeahead.min.js HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-fc24\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTzQ0wSKWzrmEcvFIUOv6JutBZ1ulZutE8vyEqmnT%2BpLWFEHhUnx1Pc83rayGjHS2%2FzISAsFUkUD1AsfTUrB0cuXBYLUT%2BCLT4yGwbGVV%2FRnJw%3D%3D\"}]}\r\ncf-ray: 966bfbcd2aceeb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64548), with no line terminators","md5":"c4e1536eb90835be00978a222f70d03f","sha1":"3d0cfad8ac338dd4fb8c6596c1e50aa9451c80e6","sha256":"c385e2769bc98fa7ed35a78a01a4e647dede244e70275adf0d50f701f7df4e13","sha512":"515934eeba0e42e763dc61520c09247009a59835870971898f185ae97c57eb9827bed78e97624d517ce4ec9ee9438cf81c81a63313cf0f1caf1978c2a1ff1999","ssdeep":"768:zkvIAZ7pmmxb+d8xgjQNgDzZ4QShi+pFiP83OoE1F1kexuIx68jq4FkOf/GoVsNu:Upmm30m/U4IVeA2BzR7qkg","tlshash":"a05341847fd0645a17475bb9332ba5dae0da081e388d844bf211fca1b15a33bfaf5631","first_seen":"2024-01-07T22:03:38Z","last_seen":"2025-07-29T10:38:22.358222Z","times_seen":20,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=23bf195ef9","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v5.15.4/css/free.min.css?token=23bf195ef9 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://legder-live-apps.com/\r\nOrigin: https://legder-live-apps.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"a12ec7ebe75a4d59a5dd6b79e2ba2e16\"\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4b9325465b369de0e96cbaa528af33e0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: CPH50-C2\r\nx-amz-cf-id: WhQIIc90oWJdqcAMMsXxUGbzDfwqAkBbY8LPDoiNVXycQJQSJLBDaw==\r\nage: 17037810\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=At%2F4EmIAQKgcsvomhr%2BSUUZRr9QgmYQ%2FsVDcvSrb2C9VFiMJfOTbwCw012O9TiYivf4A%2FyaqS45Rq%2FC7Kb9IEINvze6rrQ7miJQy5ahRER4UtA%3D%3D\"}]}\r\ncf-ray: 966bfbcfbfeb929d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":60312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60130)","md5":"a12ec7ebe75a4d59a5dd6b79e2ba2e16","sha1":"28f5dcc595ee6d4163481ef64170180502c8629b","sha256":"fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda","sha512":"28b9ea5f3f95807259c2745162424aceecac2556bc1ab9a3b33e4e15b54c6970a4df4a5892fe83c1155c82ca8d93aebb173be32f1a7f8b9d3ce038b2dd1e6ffe","ssdeep":"768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ","tlshash":"5b430bb8e54d01c9b732c44bbf81b2bc61baf73de5910d95f00e691c2ad26a811c5f7a","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-07-26T22:25:51.074446Z","times_seen":23786,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":118,"dns":22,"connect":26,"send":0,"wait":41,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/font-awesome/6.1.2/css/all.min.css","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/css/all.min.css HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-18d4d\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBvisROWvsp4NAQUg4C8RL7%2Bcmedu%2BvBEwIySdKuVp4Wykv%2FEGxk7HTyj5OkAJam09aqu7CatLl5FAkm%2FjW0GIHSihwuPv9VVopk10ozySpIKw%3D%3D\"}]}\r\ncf-ray: 966bfbccfa52eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101709,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65317)","md5":"8ef777107c4620d4ddd4f8c4bb14a36c","sha1":"0ae47fa834fb55de7b50c79021aeabecfae50c9c","sha256":"c5e8e8eb22e2eaf1ad02370c22c63c04774ab0b83b4329d5945333750814bb2f","sha512":"d6c0913dd9115e1055d8f04b51d45be2d320d70d983dfdfba9ab5415e4bbce5072ee3248f0b7f8547c167d965fa57b5848bcbce69926f4669855831fc39042d4","ssdeep":"1536:RUMVM6MVMkMVM9MVMNMVMispLZdz+WnQcnlFwLb3esoUde7cQ:oZdzRQcnlFkesoUY7cQ","tlshash":"99a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-07-26T22:58:59.020109Z","times_seen":4958,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.comimg/pre_loader.gif","fqdn":"legder-live-apps.comimg","domain":"legder-live-apps.comimg","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.414Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pre_loader.gif HTTP/1.1\r\nHost: legder-live-apps.comimg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"legder-live-apps.comimg","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=23bf195ef9","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=23bf195ef9 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://legder-live-apps.com/\r\nOrigin: https://legder-live-apps.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"f2e0b2680d9b0bcb6e0039c4424e5a59\"\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 82777fa0f27d9abf367ed3f40e63e5a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: CPH50-C2\r\nx-amz-cf-id: WCDxbypvUwIg_2RNz3Q6wYogJ_LANYH3XpuZ68D4QuVzh0BX6Y0huQ==\r\nage: 28241534\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TkySDVxPKHAcCEdqjod9ZAF9WqheUhL%2BVhPImmTxPGo9BkYM%2FgZ4B6kfPblTAgRu84%2FAGB%2B%2B9z9pKWDFy%2FxDoFlofeXfwh%2BCzSTcGWFHgFsxCQ%3D%3D\"}]}\r\ncf-ray: 966bfbcfafe0929d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2774)","md5":"f2e0b2680d9b0bcb6e0039c4424e5a59","sha1":"1ea995cea90b79f3ad16c318572313a671718645","sha256":"7f8b63bff49fba3c5bae30f4eb39f2fd6d088fbe9d7292bdf37b0ef4a1ec68d6","sha512":"df7c65b3df1a4f5ac7f697b1d6dcc264ecf3c177f9bd0375b5c52a4a124ac8cea4fde3429226875d3b39d1235623a0869230af25e6028c452c9e7e417a53fac3","ssdeep":"","tlshash":"1451aabd47d2022051920f3534e77100ea9ef06bba246eb2c629ca551cbd94b73caf1d","first_seen":"2023-04-06T02:45:40Z","last_seen":"2026-07-26T22:25:51.054608Z","times_seen":5891,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":101,"dns":21,"connect":26,"send":0,"wait":39,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2c948.css?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2c948.css?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":80,"dns":1,"connect":7,"send":0,"wait":31,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/nano_s_plus.png","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/nano_s_plus.png HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 4717\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"672dd5ca-126d\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BMDLwI4b4NjDuE0Wf241mYOf4cMqY1%2FgGwQaO33BhYIVIEV9Ob0F8iC7eNOn5DpJwUYcJT8uEaBTCru9iAxMNP2WOmXwT8D%2B%2F556P9YVC6fkQ%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a7beb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 418 x 77, 8-bit/color RGBA, non-interlaced","md5":"92fa5f0a213036a3956099762f6b0b51","sha1":"735f21b8874434d9dcb7fbb2e7239142913ae410","sha256":"d27604a6ddcb0500018c6825d52be34762e445654c5f6f68ae477b8394692a1a","sha512":"a3e791e924e13f66f0272ef3afd34dc9c54a6e26ddb36b5a7a86422be8bd8b39ae5f2c6cbfd43da42ede0d88ca93cbce57d62e2f44d54367a332c126dd8560a5","ssdeep":"48:z6YCMu6PX6hQdrOM3IOJnK9XocEkDqcYnPoZxJ6/pzIUDxNRuN2tXO7keRTUvfYS:bv+I8UjKgoZ36/eUrIZFRTozMt9O3","tlshash":"fda17d13492478610bb09d7217d2e5b3522c00ebe33c3b508f3f6bb0b6c7b6264b2498","first_seen":"2023-05-10T22:14:08Z","last_seen":"2026-04-20T08:53:18.171313Z","times_seen":48,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/ledgernano.png","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/ledgernano.png HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 6034\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Dec 2024 17:54:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67606948-1792\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YxJc9klgtzxEBIv1OIVlOGeH0a24RD%2FdleuC2sFkTuCDYgm5cS0XrzJBCsizvOTSkdiQBjuNXUn%2FDfPoaOFDe50%2F7HdXcCR%2BglLpuVT%2BGNztIw%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a8eeb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 539, 8-bit/color RGBA, non-interlaced","md5":"40f53d3b5e49a25f353352c76b6764bb","sha1":"faea635a085f8d93bbc49238f65c6a5c96a68a87","sha256":"a7ec38afcb2f40f7a576c12e914ab95e0dfde63b3cbcad1806b97a6177a7e1e4","sha512":"9e5f3e4b7a10bac21096c1de3678d5baf01fafaec15542070b374a82fd77f276af4f7518340e937dfc5cbe8754d6c6a792145b38ffdfe9c8831ddc86e8a2f2a4","ssdeep":"96:Z00U5HacnW46ik+f0dUJuPmBWIN6UEDiUfrCCCCCCCCCCCCCCCCCCCCCCCCCCCC/:6xZna+f05mt5Wiiqoog9mfKZZQncOY/","tlshash":"4ac16c871702f6efbeed354c70ef2298c92529051208767b1fcb6099b1fe840c4352b8","first_seen":"2024-06-21T22:34:18Z","last_seen":"2026-07-26T12:41:24.119127Z","times_seen":616,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/toastr.js/latest/toastr.css","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/toastr.js/latest/toastr.css HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-1eb5\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQRbeezvHjSjyRUk2ALPYYVeHo3OzdqkfymxHjEuRCVHCIyHE2oJYSSnckLDBPU%2FAaGlwtDdlNi7hGxZ11vPR3tIiMfSTvxEpKVoVUYAR8Mq7Q%3D%3D\"}]}\r\ncf-ray: 966bfbcd2ac9eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (821)","md5":"4b1e5aef507bdf05085d9c0d0ee0ff0d","sha1":"cbb42e71f1a425b712a468ebe2bd8e70bc8f0ecc","sha256":"c7290b870b4b3785b24bb7296a6db28943b0afbd3db6f17737fafbfa038cc49c","sha512":"de9222aceaf07a08cce9eac4e603d2c245333beddc4e3a6757d95ec65359aafba947ae226419ce3938a22cf6fd337eb3a4c49c6e650d21c1d4a8a0f8eccef5f6","ssdeep":"96:Lozba7hh4QdQXqrB4KkKX66thIiobmQTWQ78GhJZCjtC8TWP+zLmlDDxTWKG8Czy:Mzw2qrBb66t5zY8sywttMGqVM3","tlshash":"baf175259be22608bd85409db51926073b2aa003d6ddecb96ddfa16cefc7bd0dc71344","first_seen":"2023-04-05T22:49:17Z","last_seen":"2026-07-25T01:58:51.816869Z","times_seen":1593,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=23bf195ef9","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v5.15.4/css/free-v4-shims.min.css?token=23bf195ef9 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://legder-live-apps.com/\r\nOrigin: https://legder-live-apps.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"76f34b71fc9fb641507ff6a822cc07f5\"\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c77c2d645cbeae90b436c4ed3b9c4718.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: CPH50-C2\r\nx-amz-cf-id: ykjs73a9HZ2IDE6B54A2r4op6_2lB7WhG52fgZ5A_BO8edQPIhOREQ==\r\nage: 27085754\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xG%2FKk%2BxFG3eubJWLP5jywUY0N7G0lCrSR%2FYBZQLklXapksgWIH6Erh0SCjMcuCtXAKNAYofpuGdYdbFs79sj%2FI%2FO7e7fWYRuYhXT1dP3ipk7xA%3D%3D\"}]}\r\ncf-ray: 966bfbcfcff7929d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":26682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26500)","md5":"76f34b71fc9fb641507ff6a822cc07f5","sha1":"73ed2f8f21cd40fb496e61306acbb5849d4dbff4","sha256":"6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8","sha512":"6c4002ce78247b50bfa835a098980af340e4e9f05f7097c1e83301289051ce1282e647abab87db28a32fbfe0263c7318d2444b7d57875873908d6d5ed2af882f","ssdeep":"192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP","tlshash":"bec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-07-26T22:25:51.070526Z","times_seen":22521,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":120,"dns":19,"connect":32,"send":0,"wait":42,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Jun 2025 09:34:48 GMT","end":"Fri, 19 Sep 2025 10:34:46 GMT"},"fingerprint":{"sha1":"98:CF:C4:A6:C9:9D:71:7D:5F:41:45:24:0A:6A:CE:EC:B6:32:A5:27","sha256":"06:DF:81:44:FF:E9:7C:27:DC:9E:BB:17:BD:B1:8F:71:A6:2E:2A:56:B9:DA:4E:0E:99:42:69:4A:3F:6F:B8:E9"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://legder-live-apps.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78168\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:58:24 GMT\r\netag: \"a9fd1225fb2cd32320e2b931dca01089\"\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 360e1220d10dac057f451e8ec0e907f6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: CPH50-C2\r\nx-amz-cf-id: fjf6Ep_ggQDJyeK6KN2YaIa3bEvA5xg356p-qUBivgrxzBPdJzbqKw==\r\nage: 24573126\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXtyNlnszpa8wS%2F0TtcK77Mtsgq5X4e9PxsQrsOnyMXwX6cxs7Ci%2FoU2kmkBM%2FE6VBVV4klO1I%2FVW57BjDO19Vgb1OIVWGqYzRkGEYKkkxWQ3Q%3D%3D\"}]}\r\ncf-ray: 966bfbd13931929d-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":78168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78168, version 331.-31196","md5":"a9fd1225fb2cd32320e2b931dca01089","sha1":"44ec5c6a868b4ce62350d9f040ed8e18f7a1d128","sha256":"c5dd43f53f3af822cbf17b1fb75f46192cdbd51724f277acf6cf0dacb3fd57e7","sha512":"58f45066d5738b1ef1f431eb9fc911fc9e6f61f60538f1577cd2ebe651bd8e7b87124dae36c4e66fb303fd249eba333bf41d316774201948cad056bb0e4b4f2e","ssdeep":"1536:F9ht+In45PAr81N7kP5kBLz+1Lo3hJLld77YO6R5K0l:F7kISPSDxkBsk3hJllB66k","tlshash":"817302c1226449cad42c3765c83456c3106dbab1769bd32d208e2514f3e679eff9c97e","first_seen":"2023-04-05T23:11:06Z","last_seen":"2026-07-26T08:40:28.076666Z","times_seen":14181,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/css/style.css","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-2ff2\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGje4%2BLRq4b7uEZpYZLYhiMM7A%2BKMny00QmQk1k1EWx30LqrkUYaDxdZF69%2F4wt0BcIa1jtzDYZZXZJ7cRPrO3yu2K8cT6Qb3vdBsBD3GaivmQ%3D%3D\"}]}\r\ncf-ray: 966bfbccfa43eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12274,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"0e4a5e466e8f2231edf2af519b2c79ad","sha1":"fa0396a4be5b957936c914112c7802b9e8ed940e","sha256":"7affe38b19e80f575ca3fab79c706de96ed1dc181374039018f428fff7bb92b5","sha512":"66eff17859e8aacc26eb833d8383bb228cf70213de26fd1a394699eaf2a6608eec8edd9e7a66abf211312af1fb177a4277b2562f01eb569a4d9c3ffa3f28aa02","ssdeep":"192:2qr6/PccIWF/1Lo5ghqH+IfrTo3naBQ9AqMpccC6TLz9D9Kv9tPHFBnPHO1+W2Fh:2BPc3WFOfrTRGLFBM2FGG","tlshash":"9f423383aaa31841740b94986fb69794231d4047a50fce7d7fcd729ccf892e465b2f8d","first_seen":"2024-01-07T22:03:38Z","last_seen":"2026-03-23T00:51:58.482192Z","times_seen":21,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5ca-15d9d\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Blq4NWX%2BJX2oLG0ISeCH5uc%2BS%2Bcr53Rle%2BjuMyknepHv1bitJvaS3157vK0BpwbtDHO8te42mzzJcpUmIiacvfX66g7g7wIk%2FaSj4SjF13udiw%3D%3D\"}]}\r\ncf-ray: 966bfbcd2ac8eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-26T22:49:57.240387Z","times_seen":494421,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.ttf","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/ajax/libs/font-awesome/6.1.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U0yq%2FQCO0vCzzlDgUNBfSx0GLjGosGk9N95IqNalb0ugg%2FkvW3kGnMZpQakcFTVcljlzIDBn3uXnTEpcz9t349K2LtTztVd76NHJYlOWFZ79mz5D%2FtwCfNsmlIEzHpFxypqw7F0TGw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 966bfbd13bb492eb-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=31933\u0026min_rtt=26733\u0026rtt_var=10342\u0026sent=22\u0026recv=25\u0026lost=0\u0026retrans=0\u0026sent_bytes=6541\u0026recv_bytes=2491\u0026delivery_rate=88609\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=19059\u0026unsent_bytes=0\u0026cid=17efe8b322cec55e\u0026ts=958\u0026inflight_dur=201\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5254ba611422ac6977c89b5ffc73a36b","sha1":"c943dd95de4ba1d52c5ae3513813adc8e7e5145a","sha256":"ba49d3c7e405684479658a6492ccf47594b59dfb26ba8798687366439217094d","sha512":"068e49bb8904a8be9747dca75ca920fceed5decdeb8989fdce0d283773595a7bcd86aeff1e291f02f1327ca160989ca53523625148031d653f7601e3c3b4485e","ssdeep":"","tlshash":"78d0ebdf9053b38b0812005039c924d2264c13eaa42e86f82c83e483828863ecd8aacc","first_seen":"2025-07-29T10:38:22.344741Z","last_seen":"2025-07-29T10:38:22.344741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/favicon.png","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/favicon.png HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 402\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iTuorknhMo9Fp0pr9qoFLsdziGVmBe6sgaJ9FCWFh45F9EIQUrSOn5pOYhJQ9MuurJft9UNhAxmH3BosGVgwKVxmOZ5Ic3VdurpKJt7%2B79AYUbyjMMqsigWiiGGgQyvOAW1DRMpsYg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Fri, 08 Nov 2024 09:11:38 GMT\r\netag: \"672dd5ca-192\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: 966bfbd1fbb792eb-CPH\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=31331\u0026min_rtt=26733\u0026rtt_var=8962\u0026sent=24\u0026recv=27\u0026lost=0\u0026retrans=0\u0026sent_bytes=7439\u0026recv_bytes=2839\u0026delivery_rate=88609\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=19931\u0026unsent_bytes=0\u0026cid=17efe8b322cec55e\u0026ts=1074\u0026inflight_dur=248\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ae21ecb25616d3be96e987fe7af84d6e","sha1":"db559bfa16b130ab1b8c0b9b8693c807e29b3503","sha256":"7545b9667995fb98664f07b94793628ca6920fc953bb4eb924259480cae4bbe8","sha512":"02bbd8bdb2e77a6b39b14712828b719e7c036e006c792dd8f2d0150b09324dd2b2e7892cdbbe05cf7dc6d1d162af3ccadd65099806e857821de738228f2c3ef4","ssdeep":"","tlshash":"ede0f17081776c782de418f412ff520303ac0d5ed211021b43b5b82020f47d6134d193","first_seen":"2023-05-25T12:23:00Z","last_seen":"2026-07-26T00:02:57.186179Z","times_seen":1240,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/npm/bootstrap/dist/css/bootstrap.min.css","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /npm/bootstrap/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 08 Nov 2024 09:11:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"672dd5cb-2f955\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M42UDsqnAUc%2Foq01l20d%2FKd6ZH94CbAmdMLRIFxMLYkrHWHTusmkhFCkoCJA5Q95ehw7LxRLP7yb2qoXt14gTGJVl6Hvt31Olgvbu8EpXf7waQ%3D%3D\"}]}\r\ncf-ray: 966bfbccfa3feb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194901,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65305)","md5":"3f30c2c47d7d23c7a994db0c862d45a5","sha1":"7791dd1f3173a0d62cc39c21d2ad71fc8dad0e72","sha256":"c0bcf7898fdc3b87babca678cd19a8e3ef570e931c80a3afbffcc453738c951a","sha512":"49b891fdebaca612a8315557cac4ca1bfed5b1e5a28be63715d1ebb741292a0a53a1979e9a1a8779978b58b849badcffdaeb76570d6e4048f631b445f9354150","ssdeep":"1536:ZtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:ZtGg9JfWD9kVkpz600I4lp","tlshash":"991482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2023-04-05T16:04:29Z","last_seen":"2026-07-26T15:58:31.535541Z","times_seen":9237,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap%405.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap%405.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"3e-rVTZaEP/IducDerMLIXX9cqTIf0\"\r\naccept-ranges: bytes\r\nage: 21067\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\nx-served-by: cache-fra-etou8220153-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T22:51:02.582672Z","times_seen":17551384,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":64,"dns":42,"connect":13,"send":0,"wait":42,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"legder-live-apps.com/img/ledgernanox.png","fqdn":"legder-live-apps.com","domain":"legder-live-apps.com","tld":"com"},"ip":{"addr":"104.21.34.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legder-live-apps.com/offer.php","date":"2025-07-29T10:37:54.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legder-live-apps.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Jun 2025 11:05:06 GMT","end":"Sun, 07 Sep 2025 12:02:20 GMT"},"fingerprint":{"sha1":"C5:14:20:AB:69:37:5F:93:7F:1F:D1:3D:DB:AD:53:30:1F:AB:9D:42","sha256":"9E:D1:38:18:F0:A6:9E:91:FC:EE:10:72:4E:9F:06:8D:93:B4:E8:E9:FD:0B:A9:E5:9C:E5:15:DA:37:32:75:79"}}},"request":{"raw":"GET /img/ledgernanox.png HTTP/1.1\r\nHost: legder-live-apps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://legder-live-apps.com/offer.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 10:37:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 6559\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Dec 2024 17:54:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6760694c-199f\"\r\nexpires: Wed, 30 Jul 2025 10:37:54 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BWDjPLpQesqDYVwlj7XjMVDH5ado9XszHf0xKQHlN3hSKaMGuqyfrV9Q89fVq8h0IIcOXXQ%2FlMidP5B2YpBBb9I7Ra9vc%2F4mlkIh6%2BWu9cAGg%3D%3D\"}]}\r\ncf-ray: 966bfbcd0a90eb55-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 108 x 542, 8-bit/color RGBA, non-interlaced","md5":"0d021ce75eff38e573530e5cb49ab308","sha1":"9d2b7923640384f2b6b64575e400a616b49d56bd","sha256":"01ae25fa8b939fc52b6a927d5ec695fef8d437a2908b88c8b7c9c8472eadd820","sha512":"9be160b222158776b453a2d1e6d10dc178e6e71cf79ef2c8aca0320625f384d5763673575b995839eaeae83cfe011e1f68998ad5cda2004affca568d1a8939ec","ssdeep":"192:bux72xkSuUapK6zU46Q2EGgWwM3SU0ZGV:qMxkSLAAZQf0eGV","tlshash":"94d16e263ddb3776994da74d9f245138f0fe9c1b226b4228d0071f364075c129eabd32","first_seen":"2024-08-19T12:37:12.189527Z","last_seen":"2026-07-26T12:41:24.111249Z","times_seen":192,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}