{"report_id":"50370f9f-3a84-439c-a2e9-cf7a7fe623bd","version":0,"status":"done","tags":[],"date":"2026-07-07T20:11:55Z","url":{"schema":"https","addr":"legdler.com","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"172.67.134.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"legdler.com/","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"title":"Ledger Live: How the Ledger App Works, Security, Setup and Use","dom":{"size":37363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (862)","md5":"7a1ca6c0512afb04563e2c4567fb3f27","sha1":"5e7ed81cda97f4efcf8e84d5f9d4d1a4be37be5c","sha256":"9a6c65f8b9af46cc4aec9dd68f3742828dbf69e23bd5979b46e68cef51db0921","sha512":"e499a5735b7986f4bb6157114fa158ebecb22fe58fe0f7de48961172db7fc136603a7e59b521eee964528df4334b34d0951c53005d673d48f8858140682142bc","ssdeep":"384:QAhxij224ulQj00BdCIIM7w9l+z+FKYYh1v7+eTz:QAhxi/Vij0Kdagw9l+SsYYh1vSeTz","tlshash":"f3f2c86375f23626038702aa7a436a977f75800bc31a5455b17d826e3fc28e4c73f75a","dom_hash":"domhash0134b3ab32e9411d0555eadf58374cd1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"legdler.com","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"172.67.134.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T20:11:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"legdler.com","ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-07-07T20:09:03.394543Z","last_seen":"2026-07-07T20:09:03.394543Z","alert_count":18,"request_count":6,"received_data":80905,"sent_data":2853,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"legdler.com/script.js","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9827eed78b5143b316e99b22965cd3b5","sha1":"33ba9a133d859d6ad4d7ad690003e2cd14f6e66e","sha256":"5bf80b52d436aa43cb9a96859d57f4a32640715306cdeb805faf659a8612460c","sha512":"45e412c25309a8e7b7e90e2808ea164eb026eff301c6f7fcda4365f921ecdc3500cf86855831975555cb14a403c89816c38e3d9f74bacfb0e9727d88458b403e","ssdeep":"","tlshash":"d121c01e95583932847b73f19ae25081d63851b7f003a4b93c1c86042f760801c75eef","size":1139,"data":"","first_seen":"2026-07-07T20:09:07.069197Z","last_seen":"2026-07-07T20:11:55.750728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"legdler.com/","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T20:11:31.767Z","timestamp":1783455091767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 03 Jun 2026 12:24:36 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vltYl9NVu%2B8CA2AWh5YNDcClQLWp5mHhzvGUmq3KJoBCPQ3P%2BNneJ49vFwMokHaY1qCIdrRFRVkRwQXQiUoKJerpcdl4eT%2BeAIGdDRqdKuFqpzVpb8g6HQPnKqNeIg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1797fb3dfd6b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37364,"size_decoded":10788,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (862)","md5":"2d6f939f78d9542410d8fb535a00bcff","sha1":"e23f6162d8d23cc93189a4d80a19e65cce25bc34","sha256":"a46d5ba44f61f460a4ce900d857e40e32b0924504d65f8a2d007872d6e18195a","sha512":"177fcbdbbbae65c0cf6e8e5a9f46f352c0c67339446fa3828663e377baf6a94592560f994ab048149fec1a4015c009e6c054dffdef0f04214d24b458aded4a6e","ssdeep":"384:2Ahxij224ulQj00BdCIIM7w9l+z+FKYYh1v/u0eTX:2Ahxi/Vij0Kdagw9l+SsYYh1v9eTX","tlshash":"a0f2c86376f23626038702aa7a436a977f75800bc31a5455b17d826e3fc28e4c73f75a","first_seen":"2026-07-07T20:09:07.080579Z","last_seen":"2026-07-07T20:11:55.747096Z","times_seen":2,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":16,"connect":28,"send":0,"wait":236,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legdler.com/styles.css","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://legdler.com/","date":"2026-07-07T20:11:32.358Z","timestamp":1783455092358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://legdler.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: text/css\r\netag: W/\"6a2018f1-1b79\"\r\nlast-modified: Wed, 03 Jun 2026 12:07:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyQBdHOr8G3r%2FmLLbE4eOfRTjQv0ueMFVJ6LodYHFfzYu8e1EE5JANEtkGgTce4G9KH1HIQakKvUMJP%2BQRCCIzcHuwIIhq7bjQIAw8VziUrej9E49vwQs3AP3DS4Ow%3D%3D\"}]}\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1797fb74858b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7033,"size_decoded":2711,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f080268e95b61b9238de0742d392a400","sha1":"fa4cb29d4d37a5a7bcecb5c3bae214cf96dab41d","sha256":"f97a5f4ebd80071f7dbe0274a04de73147e2e2678fce67a90e85f7a9c8f2ff2e","sha512":"8c8c38940c2612d9cb801b51a96d607c8cddea0e8c351f2a818b789a2f7c0292a8bc8dea3515f8a80faf79691de8c6e78da633a235c600b47b4f267b579a59cd","ssdeep":"96:xTp7/RQK+tAbeZ/eIggGpu+X2KzjlRiaQdgbcJgIJUTRsmUUGB:xTpLCdtgedggGQ+X2KzjlP8gbc6ISSL","tlshash":"0ee1215c9601706a96379bb5abfa570af7c4a127ce06027ebfd952444ff42b011e2f8c","first_seen":"2026-07-07T20:09:07.082901Z","last_seen":"2026-07-07T20:11:55.748018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legdler.com/script.js","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://legdler.com/","date":"2026-07-07T20:11:32.360Z","timestamp":1783455092360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://legdler.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2018f1-473\"\r\nlast-modified: Wed, 03 Jun 2026 12:07:13 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FiqjoJNCV4xRPcGjpfL9f9b7Z4DmYbZZXlQjvPWmE6K4%2Fih4f4DPUrlQ1BmaDEEAtNNSWX9UP7J7%2FmvMqkS%2FnBb0c1qMSlb5cy%2F6%2BaSPKxufCEXV9cpkZPgzT2Xj9g%3D%3D\"}]}\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1797fb74859b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1139,"size_decoded":1193,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"9827eed78b5143b316e99b22965cd3b5","sha1":"33ba9a133d859d6ad4d7ad690003e2cd14f6e66e","sha256":"5bf80b52d436aa43cb9a96859d57f4a32640715306cdeb805faf659a8612460c","sha512":"45e412c25309a8e7b7e90e2808ea164eb026eff301c6f7fcda4365f921ecdc3500cf86855831975555cb14a403c89816c38e3d9f74bacfb0e9727d88458b403e","ssdeep":"","tlshash":"d121c01e95583932847b73f19ae25081d63851b7f003a4b93c1c86042f760801c75eef","first_seen":"2026-07-07T20:09:07.069197Z","last_seen":"2026-07-07T20:11:55.750728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legdler.com/images/1.webp","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://legdler.com/","date":"2026-07-07T20:11:32.445Z","timestamp":1783455092445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET /images/1.webp HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://legdler.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 12:09:15 GMT\r\npriority: u=5,i\r\netag: \"6a20196b-3460\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phFTfsHMcpZ0Jed8kNr3itwGEKobqmUDb%2Fzods%2F719C4rdEbifsRPLPTg7%2FKuaZa8%2BonrQoBr%2F8J4jWgahm0FAKXyjVHkC%2BF%2FhpP8iUcps33AYc%2Bw7Yz0WR1a8k8MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1797fb7c866b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13408,"size_decoded":14210,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 749x418, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eac9f0107ffbfd2de6a6631ecbbbcdbc","sha1":"eb593b50d7c33c1e799cb1dbabeae3153354c40e","sha256":"f25e9faea7eb816cf672daed27ab723c77f7e198523f46dcdda43b40fd484358","sha512":"b032e5e738db557629600aefc5af59eff717064b74c4d6904e196128dd0829f0f129a8dcd5a2d1c5e596e69175baeb8551843b71aa301a86bcc2fe4902235928","ssdeep":"192:ZJ/z3jTGZuSLxBD1FFDgvkxarDK+5gWz1K+C44NhgcceNYkUTDtcFaXwzLaC/BBE:7zXGkSLxN1FFUhDKiK+aNiLLT5ea29I","tlshash":"0352c0bbacf095342da434dfa2ff414ec8712c694b6f85a19058cec84fd9873be58089","first_seen":"2026-07-07T20:09:07.072917Z","last_seen":"2026-07-07T20:11:55.753569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legdler.com/images/2.webp","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://legdler.com/","date":"2026-07-07T20:11:32.447Z","timestamp":1783455092447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET /images/2.webp HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://legdler.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 12:09:16 GMT\r\npriority: u=5,i\r\netag: \"6a20196c-42ec\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m85gUC5bu5be9el5S%2B17sYbEFrCAU%2BcL%2B3ILifsHbShJKSSEllSTeXOoM%2Fq9%2FhiSDs855AddmsgeIqmN4%2F0PR7mVloEWWLb%2BfMTwoD3VuF%2FF3RNtvYKqvOgiUeSo%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1797fb7c867b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17132\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17132,"size_decoded":17936,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 748x418, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f80ac6eeef702e70ffbcda89677e78c","sha1":"b387f89c27b442a79332f798f8547cde0ae2942c","sha256":"a33b6b29d4b9e33d809df07ee417d07d7fa9ef628286e455027c614365ecda5e","sha512":"996c81ffd4b4f4a9d30a29a918cfa2000834c2acac10b5a00f6447e09477741e4de5c02f31db0064f8c2e7482242e6cfdf017d4bef6e16e524eda9518b2061c4","ssdeep":"384:Hw4h/+otC2u6bxeZbz78S2ctFA18yTPA2iLHBFvYzLfRj7:QroQ6xoWctsrTDBl","tlshash":"8e72d0bd516020267401cf63027ed59cab462a3a2b354f4ccc6ce0bc758d8b2157bf5b","first_seen":"2026-07-07T20:09:07.076437Z","last_seen":"2026-07-07T20:11:55.756049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"legdler.com/images/favicon.png","fqdn":"legdler.com","domain":"legdler.com","tld":"com"},"ip":{"addr":"104.21.25.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://legdler.com/","date":"2026-07-07T20:11:32.497Z","timestamp":1783455092497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"legdler.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 11:26:38 GMT","end":"Wed, 26 Aug 2026 11:26:37 GMT"},"fingerprint":{"sha1":"20:2B:FB:69:E3:CA:8A:39:EC:BD:B2:F4:15:D6:95:70:03:D8:26:69","sha256":"8C:57:14:FC:76:B2:A5:96:3F:FC:17:49:FE:6D:EB:3E:A8:11:26:12:72:EF:FA:73:65:12:FE:E2:DA:C4:3B:9E"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: legdler.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://legdler.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 20:11:32 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 03 Jun 2026 12:09:17 GMT\r\npriority: u=6,i=?0\r\netag: \"6a20196d-8a\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 171\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCvFvdiC8vWsKa3AQLa5rGaty6FW5VFjYVf5otPVH%2FQU0gmDHPww41H4keYQlgvqR69JGV4jiLFoNz640hCB8AjXmQLxUKz2rRlWe2D%2FHTEbv0SXQNnCp3KWDlmOfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1797fb8186ab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"072fc284b66358792c16a5f6d9eb5d5f","sha1":"1291835625b510f1b91e462718b87cb91021460b","sha256":"4b73011a43bb1b67affd1572ef04a7c39b2fd2d0cfe7c222f8e729354c7f8d97","sha512":"cba45f05dffdfe9bd983831fbd0d6a88d41b9c0a0d243ae95fa7924e2382f81864b714f0b1525b29f9dc20d6e5a93ac0d02205bc52c0ce953569ab543c80a6fb","ssdeep":"","tlshash":"cbc02bc026042c32c65417334d22d493fc30c5244e7202c3348180503c2540ce068f02","first_seen":"2026-01-12T14:07:20.228502Z","last_seen":"2026-07-07T20:11:55.758228Z","times_seen":102,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"legdler.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-07","alert":"Phishing Block","trigger":"legdler.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}