{"report_id":"4bc83773-9440-4187-82b0-f362764b62dd","version":0,"status":"done","tags":[],"date":"2026-06-10T20:05:21Z","url":{"schema":"http","addr":"ledger-partner-hub.com","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"ledger-partner-hub.com/","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"title":"Ledger官网入口｜Ledger硬件钱包购买咨询下载售后与正品验证｜沣泽懿","dom":{"size":51204,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9259fa36191bb0963c0fa3b028b22442","sha1":"ac5b17ca3c9ead2e89aa41b8eb11202350811efc","sha256":"0037c8f7ab55dd1694ce1680e74bf70b6f9b60f4d18d5515aacaf1ffd9f05a3c","sha512":"e969da5ec021ddd13cc36e0ac9f47fb8e0cbcd27b11601dd202ec619a882fc40a4339e84d50d1d79a2ae500a04fd11f4b4f6111f0abd8655174194db45a1665f","ssdeep":"1536:DOCRBIIwCC9PsgHikaGbOZxz9YYtHFZY6KbSvOWMX+iTs2axz5xRyBmA5JOkITQs:DOCRYCC91KZxhYZnT+e886p","tlshash":"5033d86941f7baf7106700d564e997aa7ed8d903d8ab434076fc4aec4fc8c866c1ba0d","dom_hash":"domhasha82a442fb643d022ef69d309bd0c177d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledger-partner-hub.com","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T20:05:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledger-partner-hub.com","ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":7,"received_data":147550,"sent_data":3555,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/js/main.js","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e6cc8c4170158c3508fd86319fd258e","sha1":"27910bfd7ff8d4fcf9276eeff8a9d2509ba5524c","sha256":"4b158b57aee86249dbcb5f9f88aab2463ef82a8885df632e58021b34f2ef68ae","sha512":"7f6157870df5110dc22cf110b5a00edc41c371eab6d4d2b07a42b0daa38f944179b9287a4e1cf1b3bbe5c4301a4b1846dc9063da0d06abab48ef1f5cfd7e7979","ssdeep":"","tlshash":"4a41cd7b5ab63036007b51926adfdb5a76224017120acb077a7d8d841fc1c617da3cf5","size":2035,"data":"","first_seen":"2026-06-10T20:05:25.797582Z","last_seen":"2026-06-10T20:16:47.723397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/images/hero-main.webp","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:54.639Z","timestamp":1781121894639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /assets/images/hero-main.webp HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29168\r\nlast-modified: Thu, 21 May 2026 09:53:37 GMT\r\netag: \"6a0ed621-71f0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29168,"size_decoded":29440,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1717x1100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7474a4411e33a4c3b4bfaf244301cd2","sha1":"01c6938451e5d20b7acf57c4c8db711e5758436f","sha256":"f620d55aba830417d6fffd96b4194f460630b878e8b874b6b92b323bbceca3f3","sha512":"ed670be70abf1eeb239afa9ca653ebac1a74c458ff1e004e24571a48a47c6315b684e3113ec5c2cb46811b0bd12a85604b9c1a38678c5509632b82486407cee7","ssdeep":"768:dGUhLD67c5AnXOR1jBDJcCmp2NVUy8NOqiHpIm:fLkeR1NTjN22Om","tlshash":"9fd2e1c1ce49e5a7d5e59758ba2132dbd1fc05352a03d1f3785ce7eb08248a14b8ab2e","first_seen":"2026-06-10T20:05:25.790864Z","last_seen":"2026-06-10T20:16:47.724022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1643,"receive":900,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/images/series-overview.webp","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:54.958Z","timestamp":1781121894958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /assets/images/series-overview.webp HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29818\r\nlast-modified: Thu, 21 May 2026 09:53:38 GMT\r\netag: \"6a0ed622-747a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29818,"size_decoded":30090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7a01157efd7361e37b71f9df6ab11da","sha1":"1265caebb63dc2459370ff437d9e635374358f79","sha256":"a9eaf4c013be03c9990af2bd6dad794fad9215a7baefdfc843fe82b9ff1574b5","sha512":"a7b6ec46650dcddcc6f1be57535c9173595ae1fc261d8b950445f961bb9c49c70423656c25e058795848aa4b3621a4ba2c5d30416464087f1ac58b8198c913a2","ssdeep":"768:IKjqd7B/QthltIB9UJVFYAMMQmUCcz/8SGrEdv:IA6F/QthbIvUq+Qnb/8SLv","tlshash":"b9d2e1a01a4196a5a3d260a96679438c3224b1c7735bcb73fb1ae40ff5687d031ff457","first_seen":"2026-06-10T20:05:25.791941Z","last_seen":"2026-06-10T20:16:47.724628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3115,"receive":585,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/images/favicon.png","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:55.381Z","timestamp":1781121895381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /assets/images/favicon.png HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 May 2026 09:53:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed621-1048\"\r\nexpires: Fri, 10 Jul 2026 20:04:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4168,"size_decoded":3661,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"acfa782ced40bb07f075da646ba31909","sha1":"653972c098cfadd7c4e14411e414f5e56fa56c22","sha256":"d25fb12078c0da5debe5ff420cc01936b03ff8ad2be6d4a6c744f19efb6ca10b","sha512":"2fc56e0b7aec43a4302e1a3c68dab7e4a7605e91e94bf307998c4b9a54420f95b69f6ab7083cbe59d165a680e0262e41247aad1e105f882b8f6155ae6673e00c","ssdeep":"96:5XFGM0pI1seNjUTFGV9BXsd2DTBVlFK+2Q+Qwxw6G3kXFX:KnI1seNj0wnsETJQ+2Q5wwlIFX","tlshash":"91818f41331a41aadbb5c3f9948b18ce6da5c450f3a5c37e40ad231847ea8cd1e6bfe0","first_seen":"2026-06-10T20:05:25.793079Z","last_seen":"2026-06-10T20:16:47.725185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/favicon.ico","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:55.385Z","timestamp":1781121895385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:55 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 8379\r\nlast-modified: Thu, 21 May 2026 09:53:36 GMT\r\netag: \"6a0ed620-20bb\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8379,"size_decoded":8652,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 5 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"bde5eb01ca2bf5d915caba64d774f067","sha1":"3803209d93c9ff65c33bd88c4323c038c3d95cd5","sha256":"6cf36696e59b0bf3bd81a5b4268f5f1a9c37238f18067cce5a4d1142248ebed9","sha512":"236c496895d3189add81f098e7486da38e4f04f24cc79c047a201848992fa4264fc9b59725b1c86fd3c0bbac5af9e042feb16be0aa9d7c7be149589b05373432","ssdeep":"192:AAuBR4+6iD3vPiSdzGMqzSXm52Wy7ReMNySZvhLBz:aBa1iDztXmQWukM1Zv9B","tlshash":"55029ee743891cb9887c7377876bc47185fe6220f9dac5838039aee4860b214c9d2f07","first_seen":"2026-06-10T20:05:25.794138Z","last_seen":"2026-06-10T20:16:47.725769Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T20:04:49.230Z","timestamp":1781121889230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 May 2026 09:53:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed61f-c95e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51550,"size_decoded":13805,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"462a082d10cd39d022e0646110f2354b","sha1":"076956ece49e5de54ea931e9276468b12843065a","sha256":"941b283d2281d5f9a25426dde34382fd2114ebf19b7106b42cb9c7ed78e418ae","sha512":"36a29e8bf688286febb890db7495ce0a96b3cee019aa9e6413876275d5d1f2df53116bbe2c669f53917bcac83a77482a280112b9497efae545c45ac128746629","ssdeep":"1536:HOCRBIIwCC9PsgHikaGbOZxz9YYtHFZY6KbSvOWMX+iTs2axz5xRyBmA5JOkITQN:HOCRYCC91KZxhYZnT+e8t6t","tlshash":"1533d86941f7baf7106700d564e997aa7ed8d903d8ab434076fc4aec4fc8c866c1ba0d","first_seen":"2026-06-10T20:05:25.795816Z","last_seen":"2026-06-10T20:16:47.721657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5059,"timings":{"blocked":-1,"dns":278,"connect":286,"send":0,"wait":2778,"receive":0,"ssl":1717},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/css/style.css","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:54.596Z","timestamp":1781121894596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 May 2026 09:53:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed620-4f44\"\r\nexpires: Thu, 11 Jun 2026 08:04:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20292,"size_decoded":5175,"mime_type":"text/css","magic":"ASCII text, with very long lines (2308)","md5":"8d43f370bbb7336041c2b0b14f066d07","sha1":"0dd83c6c132c96ddedd40ebd19310d930d410f1a","sha256":"588c0849f8b8de64aa6d37a0c00522d4a9c90dcaac35c09ef08decea8ef18e1f","sha512":"468f687fd4c331b83d26a41b9b05fcb44b9726edebfd6fd73d09b6acb633b27d176b6d139d0e28228b1651bd7ed6c36e357f3a1a153328700b65eb28fda0a848","ssdeep":"384:PHD9XCQ6+vtatf83hRYWa8YM9DJWL4UiPlwKBQzgrn41:PY+vAtfuRY1k94L47bygrnE","tlshash":"cd92d9b5b174b338b43be955d485768fb210e013c6ab43e4ed92a26c89db0e357b424e","first_seen":"2026-06-10T20:05:25.796618Z","last_seen":"2026-06-10T20:16:47.722552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledger-partner-hub.com/assets/js/main.js","fqdn":"ledger-partner-hub.com","domain":"ledger-partner-hub.com","tld":"com"},"ip":{"addr":"43.154.193.155","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledger-partner-hub.com/","date":"2026-06-10T20:04:54.632Z","timestamp":1781121894632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ledger-partner-hub.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Apr 2026 08:55:38 GMT","end":"Tue, 28 Jul 2026 08:55:37 GMT"},"fingerprint":{"sha1":"25:4E:17:98:45:D4:79:B1:8E:29:9D:1A:93:BA:5F:7C:77:31:4A:7E","sha256":"C7:8C:0E:E2:3F:8A:BA:A1:9D:C8:45:98:E0:E1:11:D2:71:46:93:95:C6:B7:6B:D3:F1:8C:B7:37:70:4A:C4:99"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: ledger-partner-hub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledger-partner-hub.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 10 Jun 2026 20:04:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 09:53:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0ed623-7f3\"\r\nexpires: Thu, 11 Jun 2026 08:04:54 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2035,"size_decoded":1069,"mime_type":"application/javascript","magic":"ASCII text","md5":"2e6cc8c4170158c3508fd86319fd258e","sha1":"27910bfd7ff8d4fcf9276eeff8a9d2509ba5524c","sha256":"4b158b57aee86249dbcb5f9f88aab2463ef82a8885df632e58021b34f2ef68ae","sha512":"7f6157870df5110dc22cf110b5a00edc41c371eab6d4d2b07a42b0daa38f944179b9287a4e1cf1b3bbe5c4301a4b1846dc9063da0d06abab48ef1f5cfd7e7979","ssdeep":"","tlshash":"4a41cd7b5ab63036007b51926adfdb5a76224017120acb077a7d8d841fc1c617da3cf5","first_seen":"2026-06-10T20:05:25.797582Z","last_seen":"2026-06-10T20:16:47.723397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"ledger-partner-hub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
