{"report_id":"4b57d99a-64d8-4a6b-b546-fdfbfbee7f80","version":6,"status":"done","tags":[],"date":"2026-03-06T12:28:26Z","url":{"schema":"http","addr":"ledger.tickets-management.com","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ledger.tickets-management.com/","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"title":"Ledger Live","dom":{"size":1826,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1b54e53509ea3df81e216e877b592933","sha1":"ddadc1497d8d37c76946a88c09a1a8d23a60a4d8","sha256":"119e5c27e440d4c0dc35985c1d5c81a32a536b3070e1cc2e11ee472ea5dfd817","sha512":"3235d2088eca6a9957c44f0eeb9ce1b4d6126474716fe46d47eebbd5e1bbbe9bb38347a29c8cb4ccae9a8cbf2128125a6c950491127eff1254aae1c783986951","ssdeep":"","tlshash":"ad31666ad0f1491e53538651aea27aa92f83d05be50d5c00756d093d1fe7f83d4ef09c","dom_hash":"domhash82fab5465000dcb00971ba7ba0004935","first_seen":"2025-12-07T15:12:12.960105Z","last_seen":"2026-03-26T13:42:36.283443Z","times_seen":20,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger.tickets-management.com","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T12:28:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger.tickets-management.com","ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":33,"request_count":11,"received_data":289319,"sent_data":5543,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger.tickets-management.com/llfivon.webp","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /llfivon.webp HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ledger.tickets-management.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 402\r\ncontent-type: image/webp\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae21ecb25616d3be96e987fe7af84d6e","sha1":"db559bfa16b130ab1b8c0b9b8693c807e29b3503","sha256":"7545b9667995fb98664f07b94793628ca6920fc953bb4eb924259480cae4bbe8","sha512":"02bbd8bdb2e77a6b39b14712828b719e7c036e006c792dd8f2d0150b09324dd2b2e7892cdbbe05cf7dc6d1d162af3ccadd65099806e857821de738228f2c3ef4","ssdeep":"","tlshash":"ede0f17081776c782de418f412ff520303ac0d5ed211021b43b5b82020f47d6134d193","first_seen":"2023-05-25T12:23:00Z","last_seen":"2026-08-12T13:56:44.015272Z","times_seen":1250,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/2.css","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:03.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /2.css HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ledger.tickets-management.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:03 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43202\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"839220c02e1350ac0be83c42a8c8a9a4","sha1":"5a8ac5ff22fa590034e4166b2f571068833c54eb","sha256":"b28c6cebfbb0d1d7a247994f176cdfbe0fc3073b196c6e757eab4f21f206791f","sha512":"0b8c20d3e9f2750de2914b40b9d26df8a62bc57f13e9e1dbc3d2d6ea0fd3b1c867757a6cc0f8d55dabc796c8f29f2d4652282216481e170ae1d92a69bc4885a3","ssdeep":"384:43uxEO1Q2s6DneE9pYF/FmmOF3NgQY4M85C9OS8ewQ2sJvtI:yuxDQ2sbEjYF/FmjFc4M85C9+9Q2srI","tlshash":"11131e541d974042f96b801d0beae61422dcd007edabcca9bad8d184cfcbe5d35b9798","first_seen":"2025-12-07T15:12:12.963352Z","last_seen":"2026-04-09T10:50:50.026114Z","times_seen":32,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/connect.mp4","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /connect.mp4 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ledger.tickets-management.com/\r\nRange: bytes=3473408-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37509\r\ncontent-range: bytes 3473408-3510916/3510917\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37509,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"d3beb2ee2a4f440d9f6ee9dda1494fec","sha1":"1b32c9578f66faae6b6f3f729f1b21323da60f4f","sha256":"c39d4cb55bfcc647dff0043e19abba4af117c63428b0928afd101bb17d64b0fe","sha512":"a5f03e2933531ded6b1ed2c671331c838be619b353b9c424140896910b829fabca2c37fe87cbac0a812ef7e8c5ed30f3e4ea3c772f3340535a7c7280b7fcad3e","ssdeep":"768:fnPnDFUN6E8DiX1uob5/dYrshmB0e1IS8sc:5wbuYArpqsc","tlshash":"d9f25d9def904012fba1e63d98b0c314f7b0d5e8ca56c35b459952a80df62d01fae4fa","first_seen":"2023-09-20T12:12:09Z","last_seen":"2026-08-04T03:36:55.694455Z","times_seen":648,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.tickets-management.com/2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37780\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37780, version 1.0","md5":"e1b9f0ecaaebb12c93064cd3c406f82b","sha1":"f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab","sha256":"39e72c0794c12f2dbb14a0f61ca946b535f795b1478fcf795bd26e5cb52ded34","sha512":"5fe73910046b2873220a73be768f1153475a869ec0e59abb06609fef867b44b84450ad3c3140b47328defbbdd2ce7740791f1795d8160a50ca0af058f925a0e2","ssdeep":"768:lsC2ANerCPjvZx4cl+OVNrOxS+miAS5VDcNTVMDeDjwT1fTWEbDFTGn:r2AICrZbl++KxSPAVDcMeDeWWTGn","tlshash":"6603f2fb0322620725471bb53daf4c8a16695adce349b08da4757b6958bbd98500ecc3","first_seen":"2023-04-08T12:04:12Z","last_seen":"2026-08-10T23:34:59.850398Z","times_seen":10776,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.tickets-management.com/2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37780\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37780, version 1.0","md5":"e1b9f0ecaaebb12c93064cd3c406f82b","sha1":"f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab","sha256":"39e72c0794c12f2dbb14a0f61ca946b535f795b1478fcf795bd26e5cb52ded34","sha512":"5fe73910046b2873220a73be768f1153475a869ec0e59abb06609fef867b44b84450ad3c3140b47328defbbdd2ce7740791f1795d8160a50ca0af058f925a0e2","ssdeep":"768:lsC2ANerCPjvZx4cl+OVNrOxS+miAS5VDcNTVMDeDjwT1fTWEbDFTGn:r2AICrZbl++KxSPAVDcMeDeWWTGn","tlshash":"6603f2fb0322620725471bb53daf4c8a16695adce349b08da4757b6958bbd98500ecc3","first_seen":"2023-04-08T12:04:12Z","last_seen":"2026-08-10T23:34:59.850398Z","times_seen":10776,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab.woff2 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.tickets-management.com/2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37780\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37780,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37780, version 1.0","md5":"e1b9f0ecaaebb12c93064cd3c406f82b","sha1":"f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab","sha256":"39e72c0794c12f2dbb14a0f61ca946b535f795b1478fcf795bd26e5cb52ded34","sha512":"5fe73910046b2873220a73be768f1153475a869ec0e59abb06609fef867b44b84450ad3c3140b47328defbbdd2ce7740791f1795d8160a50ca0af058f925a0e2","ssdeep":"768:lsC2ANerCPjvZx4cl+OVNrOxS+miAS5VDcNTVMDeDjwT1fTWEbDFTGn:r2AICrZbl++KxSPAVDcMeDeWWTGn","tlshash":"6603f2fb0322620725471bb53daf4c8a16695adce349b08da4757b6958bbd98500ecc3","first_seen":"2023-04-08T12:04:12Z","last_seen":"2026-08-10T23:34:59.850398Z","times_seen":10776,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T12:28:03.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:03 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1820\r\ncontent-type: text/html\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1820,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"cf4144a14fb9014e1e89d0eb43cfbaa5","sha1":"48cd16188a89fc7d5946fcb6d5d1cdf751d8941b","sha256":"0658186468ce6c457e42208770e3842c9a1d83661625b2e35c4bd9c5f24fa24d","sha512":"3f2c62a63bb56c3c1118089af50fe867272aa2e95d39a197c3c624d7d6fa1449a0b055e88843e4d1ff315906e2baf457040af296a35a35ef9077de27e2e4f9c5","ssdeep":"","tlshash":"d631666ad0f1491e53538651aea27aa92f83d05be50d5c00756d093d1fe7f83d4ef09c","first_seen":"2025-12-07T15:12:12.991717Z","last_seen":"2026-03-26T13:42:36.288566Z","times_seen":20,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":183,"dns":57,"connect":58,"send":0,"wait":184,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/UMX9jlahOh2Y.css","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:03.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /UMX9jlahOh2Y.css HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ledger.tickets-management.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:03 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37427\r\ncontent-type: text/css\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":37427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d869fef8e142dcf091192cbc37a4ba42","sha1":"2edc79f5f413e8a9094da50f9ac940d825ddd87e","sha256":"4e4ed9cb6f13d93be4f036407dbd800cbdfa181ce90512f9cd1db94925fc2b5c","sha512":"aa0d562c01a156cc2e0be5d3d6d9f9a9430e4c83707e4a0c010bf58df9732a1a72bd4d38673114d3a99e446af5ff2d38849a78ff388a8d3d6394030791b21bb1","ssdeep":"768:sANzFnxFxEFXF1FbTFCFSFYF6F7F6F0c7mFqHbFU:sSznXEb1BTYkWMRUlaUbK","tlshash":"e4f225a256630509781bd8941fe9575823a99043920fdaed7fce718ccf8b2c499e3bcd","first_seen":"2024-07-10T01:02:08Z","last_seen":"2026-04-09T10:50:50.025583Z","times_seen":87,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/mfkNbEskGSwj.svg","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:03.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /mfkNbEskGSwj.svg HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ledger.tickets-management.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:03 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1996\r\ncontent-type: image/svg+xml\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2e70ba9501583b7ebbeb06dc45a745f","sha1":"71244fe09d982498869444418aa864cbaba8862e","sha256":"7c34850991c3b7dd8816ea3314a4ddf849f6fa94a5fc39b2493593f9f6aac253","sha512":"a4ab54c1673ff7afa085d75b9032bd0acb38f0bba606947183a3babec815dc01144457e8bae29e792583a050d3ec72023485e7e58dc98e175c0052baf2731987","ssdeep":"","tlshash":"cd41c8d84bb006fdcc58e9fe0b58312c696541e5f409459df7e39e2fad9845c8c4a2f2","first_seen":"2023-09-11T01:46:33Z","last_seen":"2026-07-12T06:18:55.076162Z","times_seen":683,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/connect.mp4","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:03.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /connect.mp4 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://ledger.tickets-management.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 06 Mar 2026 12:28:03 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3510917\r\ncontent-range: bytes 0-3510916/3510917\r\ncontent-type: video/mp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42477,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"88df8a650f714ac1fd3f1d428735e9fc","sha1":"f95d433fb56e64aed40bd69ed14e8822c91a661b","sha256":"5713589f5a41efeec8fe2fad85a0f4cd200590c69ceb4b32c35da67b3e300b18","sha512":"ed5e55cff8150e54dba8a2b23300559c7d919340e87ca4e5ad562a0addda904af8d59972114e296756fd1433b07da1949e508d18a4f86169b472cb96c2b7bd9d","ssdeep":"768:kg5v4nwCvZDxVYFUE7EI/C5yW/E0m2s1VjLDiIgSyThmKEJqqkUJaVzBA:kgVawK8q5TEf2s1VXp8hmRLkUsF+","tlshash":"cf13d08a0ec41436ff74dfbc280fc628edc02648c545d3dfa2649796a2bb254947f6b2","first_seen":"2026-03-06T12:28:30.681907Z","last_seen":"2026-03-06T23:14:59.262857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger.tickets-management.com/86937de1c9cca2ecf0d0f34b2fd5d4d6906cd427.woff2","fqdn":"ledger.tickets-management.com","domain":"tickets-management.com","tld":"com"},"ip":{"addr":"91.92.240.213","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledger.tickets-management.com/","date":"2026-03-06T12:28:04.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledger.tickets-management.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 21:47:09 GMT","end":"Mon, 01 Jun 2026 21:47:08 GMT"},"fingerprint":{"sha1":"E3:EC:45:EC:44:DC:C8:69:F7:8F:6D:D7:D1:D7:71:F9:F3:31:CB:66","sha256":"26:C2:18:DF:85:13:09:13:01:FA:47:EB:A9:AA:A1:85:ED:10:3F:6F:53:FE:9E:EE:D5:E9:0C:D9:52:19:6C:35"}}},"request":{"raw":"GET /86937de1c9cca2ecf0d0f34b2fd5d4d6906cd427.woff2 HTTP/1.1\r\nHost: ledger.tickets-management.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ledger.tickets-management.com/2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:28:04 GMT\r\nserver: Apache\r\nlast-modified: Thu, 05 Mar 2026 14:46:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8764\r\ncontent-type: font/woff2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8764,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8764, version 1.0","md5":"41d31681400dd981c26cee0d50b60ebd","sha1":"86937de1c9cca2ecf0d0f34b2fd5d4d6906cd427","sha256":"13c19ec8ecbdb0854e61b191ea4f6a9820760381bf6ce39d4e18193a4b808ca5","sha512":"2058e91d8f08e5e6fc192a170fe968ba2ba247494bd02ed8b9c0a3938bf05d95eba786e3dc173f4153495bd6cce78444891a22d844a8a995a7683f9c6bfb7166","ssdeep":"192:3vfg0ynr3/Z7dAAcU09sRtZp0OmpTl8uK5O965+ODb:3v40yTZpDH09StZiB8vU9y","tlshash":"b3029eca801afa4773b871b437d70650d5a676d85e78eaa971711f4e0f9390a260f233","first_seen":"2024-04-25T13:49:29Z","last_seen":"2026-05-15T07:28:23.40444Z","times_seen":70,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-06","alert":"Phishing Block","trigger":"ledger.tickets-management.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"ledger.tickets-management.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}