{"report_id":"50a1e4b5-111c-4f46-aecf-26c7a5048f9c","version":0,"status":"done","tags":[],"date":"2026-09-13T12:53:22Z","url":{"schema":"http","addr":"ledgerwallet-app.cn/","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"183.60.150.16","port":0,"asn":134763,"as":"CHINANET Guangdong province network","country":"China","country_code":"CN"},"final":{"url":{"schema":"https","addr":"ledgerwallet-app.cn/","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"title":"Ledger Wallet","dom":{"size":4963,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9a5f9a7ee68bb9412f4a2aa8b09ec5d9","sha1":"db9d0066439ef2bebd28a7da4711ba7d823b090c","sha256":"b5aff9400ff1eb24da58814a1d5ffe6d571f230d0eb7cb9b5593f4f23c69e3e7","sha512":"33ff1e2f89ea55ea7c1dece235e465a4b948e8c960762751d4213b9e63bbe56e62f4a77bf037a42826c530fe387b1baf84722242807a016ba6997f4637999367","ssdeep":"48:nBv+TkN6NCeV1LbsoXu8LX073ydX2j13fhOUCvRfJ0v+PAhhn7hCxhrU:nBv+TnHsoXNLkmdWlhOfpWBh8vrU","tlshash":"41a1ed56e4f1c1bb502b82c6a25d7f2a7ed14417c5d5400a71fe4a6aaffcc92b4038af","dom_hash":"domhash96b52affeeb48f772d258d2b36b3bff8","first_seen":"2026-09-13T12:53:27.422098Z","last_seen":"2026-09-13T12:53:27.422098Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgerwallet-app.cn/","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"183.60.150.16","port":0,"asn":4134,"as":"Chinanet","country":"China","country_code":"CN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:53:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgerwallet-app.cn","ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"domain_registered":"2026-04-29","domain_rank":0,"first_seen":"2026-09-13T12:34:59.745658Z","last_seen":"2026-09-13T12:34:59.745658Z","alert_count":22,"request_count":11,"received_data":7625886,"sent_data":5488,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":20,"received_data":999991,"sent_data":12043,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":975045,"sent_data":673,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledgerwallet-app.cn/i18n.js","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"cad11af8b09ed29f4d1a983cfc66fb7d","sha1":"3fbd58e0ac61ca696cf491d93e3d5f734e956f15","sha256":"0629b159d9b43cf7261f9e60ebb7c039748d604d1bdc55ab4af29e566d4b2f5e","sha512":"decf938452228f079901379b86a0c103c5a5d628bafbe1dcb5db2b26c0185d2b3bc1178dbdcf744e8112e689c828c9c7edb62e5446e8fe71a6aa52ed71af5376","ssdeep":"","tlshash":"d981319eb9f224314433b06d6bdf9645b4b900430559f9383f1d4b845f9d828abf2adc","size":3853,"data":"","first_seen":"2026-09-13T12:53:27.439498Z","last_seen":"2026-09-13T12:53:27.439498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.820Z","timestamp":1789303967820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 20:40:32 GMT\r\nexpires: Mon, 06 Sep 2027 20:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 576735\r\nlast-modified: Tue, 06 Jan 2026 19:04:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56508,"size_decoded":57321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56508, version 1.0","md5":"6b89c49bad3a84fa8b0ab38ba115cff5","sha1":"dc69a7e1d9316e8320e8cf7d5775f56e288fe81b","sha256":"fb29957c7adccb9a89e34fb28d3d1c7d12bd7401f80c0dba6e1c9e5259cb3262","sha512":"a709e5ce0af961b9efec52885a41fc4ba1dc2360544c70811e52f5e82d9e08988adceb7a47320c430350f4d0f43e3a59bf5304fbc639250ee0565ebfa5cd603d","ssdeep":"1536:SgUi8SLeTb+PNJhy3g0SDolq3LNEPPB/m:SpiW6PZ4xCNQtm","tlshash":"30430111ed22da5ddde4c9b99238457a43e0cd68700c2721466b31e7dba821ebb7387f","first_seen":"2026-01-09T01:41:44.259454Z","last_seen":"2026-09-13T12:53:27.424472Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":86,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:wght@700;800\u0026family=Noto+Sans+SC:wght@400;700;900\u0026family=Noto+Sans+JP:wght@400;700;900\u0026family=Noto+Sans+KR:wght@400;700;900\u0026family=Noto+Sans:wght@400;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.312Z","timestamp":1789303966312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Barlow:wght@700;800\u0026family=Noto+Sans+SC:wght@400;700;900\u0026family=Noto+Sans+JP:wght@400;700;900\u0026family=Noto+Sans+KR:wght@400;700;900\u0026family=Noto+Sans:wght@400;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 12:52:46 GMT\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":974361,"size_decoded":254697,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"194d9f0f1dd1dc5aa78a8d39c3f56eae","sha1":"7b4fe6072b88c81677d7a52b59448a9605cf3b14","sha256":"f0dcc43528ee653298f41cffa38bed09fb9e1fcb7b5d7ac77c39366dcdfdc33d","sha512":"d1e18ceb28a556750fe9bf126877b7273abb51e5b701c879c9e8680fb53ca79aaf06e68db7759231d72db7a93ee84a6ea9273cefbf86a9d4f60e25abacb17076","ssdeep":"6144:+TXnRSjM6x9vCwdU/3IWGzJnkpOPGXB0uA4lrdc4I+z:2XAM6CuoN7","tlshash":"ee253fa5460789dffee75ce252ced5257e6824b8f940897c92f508c3ac0a01ed1dbb8d","first_seen":"2026-09-13T12:53:27.425288Z","last_seen":"2026-09-13T12:53:27.425288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":42,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.806Z","timestamp":1789303967806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52984\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:51:52 GMT\r\nexpires: Fri, 10 Sep 2027 08:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 273655\r\nlast-modified: Tue, 06 Jan 2026 19:04:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52984,"size_decoded":53797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52984, version 1.0","md5":"b2faec2d0d896e9eb815856829776a47","sha1":"670f7e750e8fc181538cb8afd87586c8d9bde06f","sha256":"a98dc5a726f82141f74a827c443e120709a12fe737fabacf2530927a275fce0d","sha512":"7848fce92cad9d50a523972709c8f3b695a13a95d3eb288d45bd26f4bda6d1b32b4b23285255bcc4f93832018428cbf5f6bc8274db73c1371e24e6ad7ca0f05d","ssdeep":"1536:idm3Zg+GYL2IlptUjXT9yRKhqcimDLK4ypJh3O:idm3BL3GsRoZiSDeJ0","tlshash":"0b33f255ee83db92c201ae09f49ab8581f06e338926c956037fd1e6f83c258dd0b79c3","first_seen":"2026-01-09T01:41:44.262235Z","last_seen":"2026-09-13T12:53:27.433094Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":74,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.810Z","timestamp":1789303967810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 00:53:51 GMT\r\nexpires: Sat, 11 Sep 2027 00:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 215936\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52464,"size_decoded":53277,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52464, version 1.0","md5":"9b32cb6db243ebeb0a1df911a26bb60d","sha1":"aece76019bb22f090d7852a65f44d721f5da1f11","sha256":"d94b5af0c14838af99bf9855f91e851878726558531ddef5bd2100b70dfbe90c","sha512":"f8e20ab5d08f48b526f5eee72262e0e2e1780353426a5067550efadc43761ad15fc507f207b9c72b7ba065b488f9671fae4b11b3451b25757c97cdd00d7a0e70","ssdeep":"1536:jV7XxXVMZ1gK+n4HQ0+zbfi+nuyLPViBKG7:j9x+lI4R+P1uyDcx","tlshash":"11330266cbd8736aa4331a83c07f6920a7f294a09219e774657403d7125dc4bbbeff42","first_seen":"2026-01-09T01:41:44.26601Z","last_seen":"2026-09-13T12:53:27.434233Z","times_seen":1247,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":50,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:52:43.977Z","timestamp":1789303963977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 1471\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"index.html\"; filename*=utf-8''index.html\r\ncontent-encoding: gzip\r\ncontent-md5: G4mcuIdMMJe69YZ8vzXupg==\r\ncontent-transfer-encoding: binary\r\netag: \"FgBD8FBhr4p32lRV8ZgpiRwToBq-.gz\"\r\nlast-modified: Sat, 29 Aug 2026 07:19:25 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-22;QNM:yzh169;SRCPROXY:yzh151;SRC_***:35/304;SRCPROXY:35/304;QNM3:37/304;QNM3:71\r\nx-m-reqid: iu1IkL9Fc\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: xD8AAAC_wpCqNdAY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5282,"size_decoded":2310,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"1b899cb8874c3097baf5867cbf35eea6","sha1":"0043f05061af8a77da5455f19829891c13a01abe","sha256":"b9f927fd2328d5a7faaf3d43a3b0e982ef843bfe4900ced627419f5e6aff54c7","sha512":"f998ca130a2233cd11462a01b8f842d102ecc738cf57311efc556599b8fde32247f79a2249cdc992528f81bdbce88f3065a95acd501204dbb18b15327426b788","ssdeep":"96:juZYsoXSzLz7zBAlTz+fpKj6jjBToXj3zEjoJjD:CZYfCz64pM81Tu3zCopD","tlshash":"e8b14112d4f0c1ba502b82d6629d3f26bed19117c5e9400a71fd8a56affcc92f4078af","first_seen":"2026-09-13T12:53:27.434984Z","last_seen":"2026-09-13T12:53:27.434984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1892,"timings":{"blocked":-1,"dns":459,"connect":266,"send":0,"wait":677,"receive":0,"ssl":489},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/mobile.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.324Z","timestamp":1789303966324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/mobile.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38892\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"mobile.webp\"; filename*=utf-8''mobile.webp\r\ncontent-md5: 2lPfUppKtugiU4En2SPaZg==\r\ncontent-transfer-encoding: binary\r\netag: \"FoWI_YlWXbHVCdWosjHJwGS9gax4\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:20 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-20;QNM:cz21;SRCPROXY:cz24;SRC_***:36/304;SRCPROXY:36/304;QNM3:38/304;QNM3:73\r\nx-m-reqid: ZsqqWtffd\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: V3gAAAAXAzd64tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38892,"size_decoded":39681,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da53df529a4ab6e822538127d923da66","sha1":"8588fd89565db1d509d5a8b231c9c064bd81ac78","sha256":"0d5d2574b3936f26c4638ed174bdd1479e97c7b24a567461fac6fa7c09a20d9f","sha512":"740e757e03aaafaf60e7f3bbdfd8bba17c38f0d89abfde56c9ea3ed9e278b2bb6f16d6642f6d07040196406078e3490e01f5278aa1398107274ca96ca2a1cbc0","ssdeep":"768:czHSyUqe3BCg0qQKbSCKETHXmSs8I2cHbdPjaxlvhhd53qV9l:czH6U3ej5THWSs8I/PjaTvhhnM","tlshash":"cd03f2594b221d8efd8d0eb5632a0fe59392cdac4a39b24c66b50122793b41ed63c7f4","first_seen":"2026-05-10T09:09:18.188192Z","last_seen":"2026-09-13T12:53:27.436845Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1414,"receive":761,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.800Z","timestamp":1789303967800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:34:36 GMT\r\nexpires: Thu, 09 Sep 2027 10:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353891\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":36741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-09-14T23:44:04.762813Z","times_seen":31430,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":47,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.802Z","timestamp":1789303967802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:34:36 GMT\r\nexpires: Thu, 09 Sep 2027 10:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353891\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":36741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-09-14T23:44:04.762813Z","times_seen":31430,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":61,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/style.css","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.315Z","timestamp":1789303966315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 1998\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"style.css\"; filename*=utf-8''style.css\r\ncontent-encoding: gzip\r\ncontent-md5: h2AzalxA2/TYPG5RgZw6QA==\r\ncontent-transfer-encoding: binary\r\netag: \"FlsYbMFZabL4CamHpf2zm46tialL.gz\"\r\nlast-modified: Wed, 03 Jun 2026 03:01:19 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-23;QNM:yzh156;SRCPROXY:yzh175;SRC_***:39/304;SRCPROXY:40/304;QNM3:47/304;QNM3:74\r\nx-m-reqid: ErdH9D9Ph\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: DvYAAABb1cCB4dQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6352,"size_decoded":2834,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"8760336a5c40dbf4d83c6e51819c3a40","sha1":"5b186cc15969b2f809a987a5fdb39b8ead89a94b","sha256":"4330581932b222a9d9323e3cc274a9344e5c3deb2f3774c102c1ede27df6e9ea","sha512":"72b0efb5db75a31a48bcec1ecb94127d8d245753c3f46f2dd7afb6e2841a20169eac0bc803779fe9cf6447c4c1d38078e23ca75365a7ef914954b7434d684c8f","ssdeep":"96:LRO7uOuhvgAGaJXgWFIRIAsrTAY04UJRCIwcCCqjqUvVwiF:HDdgAGaJCY04uX6bF","tlshash":"1cd1a5a723116199b82ef2a97e6b674de329a447634962fd5cd1104dc3ce3b401b2bcd","first_seen":"2026-09-13T12:53:27.438224Z","last_seen":"2026-09-13T12:53:27.438224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/i18n.js","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.317Z","timestamp":1789303966317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /i18n.js HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1616\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"i18n.js\"; filename*=utf-8''i18n.js\r\ncontent-encoding: gzip\r\ncontent-md5: ytEa+LCe0p9NGpg8/Gb7fQ==\r\ncontent-transfer-encoding: binary\r\netag: \"Fj-9WOCsYcppbPSR2T49X3NOlW8V.gz\"\r\nlast-modified: Wed, 03 Jun 2026 03:01:19 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-26;QNM:yzh160;SRCPROXY:yzh151;SRC_***:44/304;SRCPROXY:44/304;QNM3:47/304;QNM3:66\r\nx-m-reqid: kyImrvtQO\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: Ik8AAACosTV64tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3853,"size_decoded":2455,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"cad11af8b09ed29f4d1a983cfc66fb7d","sha1":"3fbd58e0ac61ca696cf491d93e3d5f734e956f15","sha256":"0629b159d9b43cf7261f9e60ebb7c039748d604d1bdc55ab4af29e566d4b2f5e","sha512":"decf938452228f079901379b86a0c103c5a5d628bafbe1dcb5db2b26c0185d2b3bc1178dbdcf744e8112e689c828c9c7edb62e5446e8fe71a6aa52ed71af5376","ssdeep":"","tlshash":"d981319eb9f224314433b06d6bdf9645b4b900430559f9383f1d4b845f9d828abf2adc","first_seen":"2026-09-13T12:53:27.439498Z","last_seen":"2026-09-13T12:53:27.439498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.815Z","timestamp":1789303967815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 03:29:59 GMT\r\nexpires: Sun, 12 Sep 2027 03:29:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120168\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46192,"size_decoded":47005,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46192, version 1.0","md5":"5556d1a216ad1866c0e9d00290a3c9cd","sha1":"f534be976ceb3c29d1ca0865df117eb692bbfe29","sha256":"76c9ddb85ae4578cccd35ae4f6e6bbffaa2c8c2aec0fea17d3c17c84a3c6f7d1","sha512":"6859702849475921b6aefa36d2ad5dd4239719e145d83b05abd61fd57b1108a0a181967b0a15355e52721c1d934b2e7f2634bbaa2e860933b89e9e2f7cc8f823","ssdeep":"768:LP8gIehhR1z5H3GLFFRXcp5ZEZaadTlg0YhQarNwPtHVY9fS4fuYWbkZDVX7mUXn:LfPR1zlGJFRUZEZaaplg0YVu6pbfrsk/","tlshash":"8f23f200afad935de5b62b3cde79941019fd79ea8c3418e9c17798ca9000e7bd0ea573","first_seen":"2026-01-09T01:41:44.260322Z","last_seen":"2026-09-13T12:53:27.440648Z","times_seen":1251,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":54,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.111.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.818Z","timestamp":1789303967818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.111.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 21:20:31 GMT\r\nexpires: Mon, 06 Sep 2027 21:20:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 574336\r\nlast-modified: Tue, 06 Jan 2026 19:03:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62664,"size_decoded":63477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62664, version 1.0","md5":"9ffb39c4cc253e2ebb75c1133bed7332","sha1":"154436bc28900e2d28a444723e4913cbb646a81a","sha256":"372be010ac0e87cb12065a861da39821104a43d68345a62ca95d3d3e2fb2c269","sha512":"dffac688c58d3b30c9b48a874ddba91179378f29af5b7527ae605fabb33d7a3c1292050f09ce17df79e469d553137ca64d3bc112680b26b2da07e456dbfb56bf","ssdeep":"1536:1tvfLfe1dfkkWl0/ljjn+H2fdk3UIQLoE21R:vDe1dIqNOH+dCLUoEAR","tlshash":"d5530178a1c727c0a858ff36943552659ccbede76c0c13a986e8b53bf08214b0da4f5e","first_seen":"2026-01-09T01:41:44.2869Z","last_seen":"2026-09-13T12:53:27.441242Z","times_seen":976,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":88,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.822Z","timestamp":1789303967822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 03:29:59 GMT\r\nexpires: Sun, 12 Sep 2027 03:29:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120168\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46192,"size_decoded":47005,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46192, version 1.0","md5":"5556d1a216ad1866c0e9d00290a3c9cd","sha1":"f534be976ceb3c29d1ca0865df117eb692bbfe29","sha256":"76c9ddb85ae4578cccd35ae4f6e6bbffaa2c8c2aec0fea17d3c17c84a3c6f7d1","sha512":"6859702849475921b6aefa36d2ad5dd4239719e145d83b05abd61fd57b1108a0a181967b0a15355e52721c1d934b2e7f2634bbaa2e860933b89e9e2f7cc8f823","ssdeep":"768:LP8gIehhR1z5H3GLFFRXcp5ZEZaadTlg0YhQarNwPtHVY9fS4fuYWbkZDVX7mUXn:LfPR1zlGJFRUZEZaaplg0YVu6pbfrsk/","tlshash":"8f23f200afad935de5b62b3cde79941019fd79ea8c3418e9c17798ca9000e7bd0ea573","first_seen":"2026-01-09T01:41:44.260322Z","last_seen":"2026-09-13T12:53:27.440648Z","times_seen":1251,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":58,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.112.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.824Z","timestamp":1789303967824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.112.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 57648\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:48:36 GMT\r\nexpires: Sat, 11 Sep 2027 18:48:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 151451\r\nlast-modified: Tue, 06 Jan 2026 19:03:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57648,"size_decoded":58461,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 57648, version 1.0","md5":"bb86f71e5996622a6b4231fb51cfe25e","sha1":"4ec3191070d6897f3ae612b18825cacc0bd0b202","sha256":"34a4580239eae8dc54b726a1e1e9fec266e74225b112063ed93b412d54b97ccd","sha512":"002b7cfe2af492a316d15463d5343810b7fd85b7d8bef38421b695977257f55bcb71bbd4f2099197b23b92783fe9d3138771b8d2cd996ca3b4cee859053bfaff","ssdeep":"1536:YSj5PlP5pi7BYjZW0BJsxpbTKfjD3iKb+VIKVZA:YSZlaydW0BJsfPKfSKqjA","tlshash":"ad4301824ece6be2c67523f7aef124d6e60de90162047055313ee433c6ee1f4993a65e","first_seen":"2026-01-09T01:41:44.266878Z","last_seen":"2026-09-13T12:53:27.442062Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":75,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.805Z","timestamp":1789303967805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 00:53:51 GMT\r\nexpires: Sat, 11 Sep 2027 00:53:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 215936\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52464,"size_decoded":53277,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52464, version 1.0","md5":"9b32cb6db243ebeb0a1df911a26bb60d","sha1":"aece76019bb22f090d7852a65f44d721f5da1f11","sha256":"d94b5af0c14838af99bf9855f91e851878726558531ddef5bd2100b70dfbe90c","sha512":"f8e20ab5d08f48b526f5eee72262e0e2e1780353426a5067550efadc43761ad15fc507f207b9c72b7ba065b488f9671fae4b11b3451b25757c97cdd00d7a0e70","ssdeep":"1536:jV7XxXVMZ1gK+n4HQ0+zbfi+nuyLPViBKG7:j9x+lI4R+P1uyDcx","tlshash":"11330266cbd8736aa4331a83c07f6920a7f294a09219e774657403d7125dc4bbbeff42","first_seen":"2026-01-09T01:41:44.26601Z","last_seen":"2026-09-13T12:53:27.434233Z","times_seen":1247,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":32,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.819Z","timestamp":1789303967819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosans/v42/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7du3mnPyxVig.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:34:36 GMT\r\nexpires: Thu, 09 Sep 2027 10:34:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353891\r\nlast-modified: Wed, 10 Sep 2025 16:23:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35928,"size_decoded":36741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35928, version 1.0","md5":"a317875aac104234bd7c39df8c501fbb","sha1":"870661970316f61acaab613e3209b9c09e2961f3","sha256":"065e2ab41209dcd60b1c88517c71a741803e3b0647059cb8ee7efff522ed1d40","sha512":"619f405a133ec8227767f08c598399a737d30cea6f76d3c065d2d97ce162bae040ced7fca13ed874d66a1f98472a3a07cf12bb146f432c8d4df24745488e13d0","ssdeep":"768:ybZHErhpxKts8YgN3IJe53ZnJREjqvYSVgXsdp+v0Gd:ybxErktsfgN3fXlicOzd","tlshash":"bef2f11c1a34eb974328047b840084b533ea6da7d63192b121a5fb44cca46fafecfdd6","first_seen":"2025-09-11T17:08:53.61315Z","last_seen":"2026-09-14T23:44:04.762813Z","times_seen":31430,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":66,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/logo.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.323Z","timestamp":1789303966323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/logo.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2034640\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"logo.webp\"; filename*=utf-8''logo.webp\r\ncontent-md5: Zo5WYpsBTxs+TD7+PkxO8g==\r\ncontent-transfer-encoding: binary\r\netag: \"FrXvZyDwbOczd1aCooygtVht_RXS\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:44 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-26;QNM:cz30;SRCPROXY:cz10;SRC_***:34/304;SRCPROXY:34/304;QNM3:35/304;QNM3:55\r\nx-m-reqid: ZeOGMC1fR\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: MCUAAAC48DV64tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2034640,"size_decoded":2035427,"mime_type":"image/webp","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"5f01eb489eb513a3b02b4ea73b2c2907","sha1":"b91d298ad10a6ca478428cbfff0d08a9200b9ab4","sha256":"465983e3a21518be985ec24458045842fc8e5f50176255131d41460e9e946eb2","sha512":"435010f1933dca78987fe9c03dcba0d8edc39bbf694a0c08d39ab6c0ca05f8200a546fd09fdbb2535cc65c368db463e3899b19d080b682796777312f3ef7f3b2","ssdeep":"24576:8IDQ5IZ4K9k7lDTXtc7KHjlP3R7oLfpNmY0eLYRS7:BqInk7lDLuOHjlP3R78rmPR47","tlshash":"022533673c786f75ec13073329c6db462c478ab9dc04d0aa8235aebe409fd6056c51bb","first_seen":"2026-09-13T12:53:27.44265Z","last_seen":"2026-09-13T12:53:27.44265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":4196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/windows.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.328Z","timestamp":1789303966328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/windows.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1580020\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"windows.webp\"; filename*=utf-8''windows.webp\r\ncontent-md5: 40igQ8DRRDpuDPMabwB/jg==\r\ncontent-transfer-encoding: binary\r\netag: \"FkhV1y8Poe2mc3cQq0jcbKdHaB9a\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:43 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-27;QNM:cz29;SRCPROXY:cz24;SRC_***:32/304;SRCPROXY:32/304;QNM3:34/304;QNM3:69\r\nx-m-reqid: 75zxkX1aT\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: 1nUAAAAcH6wW4tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1580020,"size_decoded":1580813,"mime_type":"image/webp","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7b3218e3d3db8fd42bf4dbbf164c58cd","sha1":"03bc7a6cf8ee54a4e0fb8e7a2517a38f3fedc7bf","sha256":"bbd5d4a58d203a13e2fa76123f95384fcaab417c656350518390ca209d2893e5","sha512":"20a9ace7eb8ccf681f7c08a26e92aa0495106046045f9671ed8a0b1e54e9a6b7fd2da9575e1282badc4cc9a8fed2090471f72dc33115971242160a8243082b44","ssdeep":"24576:iPElTnIJsglu0lzZKjIR8ImKxJSlYyeclAFty5xEL0:ocmgozZWx+YiiktKEL0","tlshash":"eb25235e4f486153c98a6c70aad964220d53a7837098ac93f57fa1ef8058b443792fff","first_seen":"2026-09-13T12:53:27.443897Z","last_seen":"2026-09-13T12:53:27.443897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1410,"receive":2342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/linux.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.329Z","timestamp":1789303966329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/linux.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1945224\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"linux.webp\"; filename*=utf-8''linux.webp\r\ncontent-md5: LzMI/GnlMPq92xKKqfyaiw==\r\ncontent-transfer-encoding: binary\r\netag: \"FsoajwB12vNO3CkL0p3OMcc06rbx\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:44 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-24;QNM:yzh155;SRCPROXY:yzh175;SRC_***:28/304;SRCPROXY:28/304;QNM3:31/304;QNM3:57\r\nx-m-reqid: 4uVKdj3BT\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: M9QAAADRM8IW4tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1945224,"size_decoded":1946017,"mime_type":"image/webp","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"15282ee9ed58036e020dd8bbdaa8aef3","sha1":"866c38357445486aae6002e79b05ef66359f7757","sha256":"10d6a2cc0e3a7738f446bfc8ee6d79c171e2aca7cc14eeebd88c1b03cd7122fb","sha512":"bdc7f1f587e6eac521cdee6c6ce7d2d12fc9cd4430d6f6104c82b9c0a5605f68cc79a6f0e667fecf4b2f4860c4efb5415b15c57be5f8945fa6a89bcc9f2e41cd","ssdeep":"24576:NvLtwzMwZavpw70i4+8IHIbhxFyWt4QMMHrK8Vy8:tsMwMvpM0HpMItxFyWL//","tlshash":"5f253393253ca480ce432a7af1b0a94e5f62ebf09527f9cfd5399184c94c61b756e32c","first_seen":"2026-09-13T12:53:27.445737Z","last_seen":"2026-09-13T12:53:27.445737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1408,"receive":2932,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.114.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.809Z","timestamp":1789303967809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.114.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 57964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 12:06:47 GMT\r\nexpires: Fri, 10 Sep 2027 12:06:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 261960\r\nlast-modified: Tue, 06 Jan 2026 19:04:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57964,"size_decoded":58777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 57964, version 1.0","md5":"16698fafcf105084ad625d2a839d3a3c","sha1":"532b638fa58df66062eae75dd77581467564eeec","sha256":"cf7b8344807a316e8db054500a2b44ad9346ffa00763fec203ab5aa1c99ff602","sha512":"95f7ae2613ced115776a27097d8b1351b29c4a1af515e40fd4b0e0a39ea10e8ec23e1db3654c64ac81ccb55c27ce8b733aacc283362f2d24d89f5a668aaaea51","ssdeep":"1536:x9+jUWfnLKVuTrE2zCqYl7+fXUX1HyXH0lBvl9Z:WKofEsCq6EHAZln","tlshash":"0b43028106e7758cb92872dd9c153cccb6d39af74fd184b898aa4779e70513ca084ec7","first_seen":"2026-01-09T01:41:44.274419Z","last_seen":"2026-09-13T12:53:27.447549Z","times_seen":1083,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":70,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.813Z","timestamp":1789303967813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 20:40:32 GMT\r\nexpires: Mon, 06 Sep 2027 20:40:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 576735\r\nlast-modified: Tue, 06 Jan 2026 19:04:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56508,"size_decoded":57321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56508, version 1.0","md5":"6b89c49bad3a84fa8b0ab38ba115cff5","sha1":"dc69a7e1d9316e8320e8cf7d5775f56e288fe81b","sha256":"fb29957c7adccb9a89e34fb28d3d1c7d12bd7401f80c0dba6e1c9e5259cb3262","sha512":"a709e5ce0af961b9efec52885a41fc4ba1dc2360544c70811e52f5e82d9e08988adceb7a47320c430350f4d0f43e3a59bf5304fbc639250ee0565ebfa5cd603d","ssdeep":"1536:SgUi8SLeTb+PNJhy3g0SDolq3LNEPPB/m:SpiW6PZ4xCNQtm","tlshash":"30430111ed22da5ddde4c9b99238457a43e0cd68700c2721466b31e7dba821ebb7387f","first_seen":"2026-01-09T01:41:44.259454Z","last_seen":"2026-09-13T12:53:27.424472Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":83,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/favicon.ico","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:49.016Z","timestamp":1789303969016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 30\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-22;QNM:yzh163;SRCPROXY:yzh175;SRC_***:42/404;SRCPROXY:42/404;QNM3:149/404;QNM3:176/404\r\nx-m-reqid: Kg6b9Whpc\r\nx-qnm-cache: Miss, Validate as miss: no-header,MissValidate\r\nx-reqid: nAYAAACh2NZ64tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":30,"size_decoded":543,"mime_type":"application/json","magic":"JSON text data","md5":"dae2f3dd9baf239b45dd8bc1408e67de","sha1":"5e415fd3ee90548957bb73ce748eca52a65a01b3","sha256":"63f167d2adce5d2b33fc90c8a437615e605ac1ab3dd8b6e028dbc502da3b663e","sha512":"c6a02ee82874cf52d5f445b01139b47ffb3503e7f426269ebb6f5083b3553e8c727de9c9e97317b9155c365914ce2cd608c48ce0249cfc36f0c1bfe72ddafb3f","ssdeep":"","tlshash":"ab80000c0083020e0082a8a02ae8b83028a802c0a8a0be20a0a8c00800008828c208aa","first_seen":"2023-04-12T22:55:24Z","last_seen":"2026-09-13T12:53:27.448409Z","times_seen":2405,"resource_available":true,"data":null}},"time_used":1063,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1063,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/android.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.326Z","timestamp":1789303966326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/android.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1959754\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"android.webp\"; filename*=utf-8''android.webp\r\ncontent-md5: suX9B7+HR2CCv6L49ObwGQ==\r\ncontent-transfer-encoding: binary\r\netag: \"Fmw3nOdv_1lqyRa1owfQcmHjl0X7\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:44 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-24;QNM:yzh166;SRCPROXY:yzh175;SRC_***:37/304;SRCPROXY:37/304;QNM3:40/304;QNM3:60\r\nx-m-reqid: xzwkzDqyS\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: HSkAAADsG1fujcEY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1959754,"size_decoded":1960551,"mime_type":"image/webp","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"6c92c7a137f034c515c797feac150550","sha1":"a22c75cdf2ac04b6cd2fde158f209a985bf22e7b","sha256":"226510c21b5ea6caac0ca776334439585cccb8cd99909f203e633d1827ca16dd","sha512":"dcf04eb29489b6d53ec707fa6f68ccd12101595f13a095643aa5cf1febd75a3693b04a90732f4e6a48963e9287e530162faff1a1dcc4c439bbc268b212526d42","ssdeep":"24576:qLbwYd6O0hLpQ9+EifvNPVo24gvZawyWg4oP/FR172j+lsMh9F3Q7duP:MwYdMd8+Ein9mwvZa1Watr7o+lNhgduP","tlshash":"6e25339457163675ead07a379f86017ed80442ec3e5a034a2f36bc613e70e97f62c86b","first_seen":"2026-09-13T12:53:27.449175Z","last_seen":"2026-09-13T12:53:27.449175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1412,"receive":1941,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.30.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.808Z","timestamp":1789303967808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.30.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 54656\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 21:40:48 GMT\r\nexpires: Sun, 12 Sep 2027 21:40:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54719\r\nlast-modified: Tue, 06 Jan 2026 19:06:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54656,"size_decoded":55468,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54656, version 1.0","md5":"ad83337f3d3e0b153406ffecfc4a78fc","sha1":"e74fd99c744545dad2d1b887cfe962571439e6f5","sha256":"1f76f6ffded00b9ead063038ebfd5019ad334ffeb7035dda3aa33f4dd1bb7adc","sha512":"f080cbdbb342635349e690621578893243139eca475fffca81b0424bb2615f22da48e4a84d0cc57d366222ff4d749c836a9cf8ee5a8a3c204c21d78ab8bbf2f1","ssdeep":"1536:rSpZTw3Ewd0Lc8m7S2YyA7S57Jo467f02PFo1mszbp:upZT/9L+IQp6XWsszbp","tlshash":"c5330270a74727305bf54763dbccaab46395762ec6c921b8198ddcb874a6dec83b9010","first_seen":"2026-01-11T13:13:05.767433Z","last_seen":"2026-09-13T12:53:27.450835Z","times_seen":16,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":69,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/i18n/i18n_en.json","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.829Z","timestamp":1789303967829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /i18n/i18n_en.json HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 355\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"i18n_en.json\"; filename*=utf-8''i18n_en.json\r\ncontent-encoding: gzip\r\ncontent-md5: 4aFEKRGcy/X7Fk2IAE4ACg==\r\ncontent-transfer-encoding: binary\r\netag: \"FqXehpb_mkhM9hiQdN70Nhfc6xxJ.gz\"\r\nlast-modified: Wed, 03 Jun 2026 03:01:37 GMT\r\nvary: Accept-Encoding\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-23;QNM:yzh157;SRCPROXY:yzh172;SRC_***:31/304;SRCPROXY:31/304;QNM3:32/304;QNM3:67\r\nx-m-reqid: tIx1Os9fq\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: FkoAAAAqcbN64tQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":595,"size_decoded":1204,"mime_type":"application/json","magic":"JSON text data","md5":"e1a14429119ccbf5fb164d88004e000a","sha1":"a5de8696ff9a484cf6189074def43617dceb1c49","sha256":"d2a0470c3cf667ac714c8049a9ec61bb46cf938d9dd8485e8ba3c52d78063fe3","sha512":"6c217f29beb8c92b554f752101e47e023552caf879dc49db1032e01a9590d10069727c2edf1a736c3c3317e57b774de02a729ef088844e5dfe4ff9c566cf3b8c","ssdeep":"","tlshash":"75f07dbb4e26a36709d1324c942d57ea021d0c474305219d0b72941e21daca390fda9f","first_seen":"2026-09-13T12:53:27.451538Z","last_seen":"2026-09-13T12:53:27.451538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgerwallet-app.cn/static/desktop.webp","fqdn":"ledgerwallet-app.cn","domain":"ledgerwallet-app.cn","tld":"cn"},"ip":{"addr":"122.228.207.51","port":443,"asn":134771,"as":"WENZHOU, ZHEJIANG Province, P.R.China.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:46.327Z","timestamp":1789303966327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgerwallet-app.cn","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2024","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 31 Jul 2026 06:00:00 GMT","end":"Thu, 29 Oct 2026 05:59:59 GMT"},"fingerprint":{"sha1":"E2:0B:9C:64:8C:99:82:34:65:8F:2B:EB:3E:5E:55:D3:D9:E9:3C:C8","sha256":"23:1E:D0:4A:10:70:C1:56:21:7C:F6:19:0B:C2:76:B6:6C:2E:16:B2:B0:84:08:BF:5B:10:2B:88:CD:9A:FB:19"}}},"request":{"raw":"GET /static/desktop.webp HTTP/1.1\r\nHost: ledgerwallet-app.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgerwallet-app.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 13 Sep 2026 12:52:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42614\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 0\r\ncache-control: public, max-age=60\r\ncontent-disposition: inline; filename=\"desktop.webp\"; filename*=utf-8''desktop.webp\r\ncontent-md5: 4b6fR9q0AlHZ0us6pjyhtA==\r\ncontent-transfer-encoding: binary\r\netag: \"FpjZGuzGygTqcrucHIvao_qpVrAN\"\r\nlast-modified: Wed, 03 Jun 2026 11:59:20 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:cdn-cache-dls-zjwz-wz-28;QNM:yzh160;SRCPROXY:yzh152;SRC_***:31/304;SRCPROXY:31/304;QNM3:34/304;QNM3:53\r\nx-m-reqid: Y27Msvqvh\r\nx-qiniu-zone: 2\r\nx-qnm-cache: Validate,Hit\r\nx-reqid: RW8AAAA-IFHh4dQY\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42614,"size_decoded":43409,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1be9f47dab40251d9d2eb3aa63ca1b4","sha1":"98d91aecc6ca04ea72bb9c1c8bdaa3faa956b00d","sha256":"28a416bca1970d41bff548bfafed3c436c08c6b48a273e29505de2a7415b0af1","sha512":"3de81fff386553d51231449ed75499885d11ef0d76b23517b99c6314613c4a0a667cfeb7a0b912d2e633dea720c0569aa908131c811b09a25140836ee631df98","ssdeep":"768:pYln4qUrxrYYtkB74aHIx0P07HQ79Jd18cfNmh85pjkH5dNoE+qI:2KTcmkVTCQ79N+WpmQz","tlshash":"9213f2906782bafad77fa5712ae27e31d085ed11173de940012f68d8bb5a40cd9c3e27","first_seen":"2026-05-10T09:09:18.130554Z","last_seen":"2026-09-13T12:53:27.453079Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1411,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ledgerwallet-app.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ledgerwallet-app.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.811Z","timestamp":1789303967811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52984\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 08:51:52 GMT\r\nexpires: Fri, 10 Sep 2027 08:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 273655\r\nlast-modified: Tue, 06 Jan 2026 19:04:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52984,"size_decoded":53797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52984, version 1.0","md5":"b2faec2d0d896e9eb815856829776a47","sha1":"670f7e750e8fc181538cb8afd87586c8d9bde06f","sha256":"a98dc5a726f82141f74a827c443e120709a12fe737fabacf2530927a275fce0d","sha512":"7848fce92cad9d50a523972709c8f3b695a13a95d3eb288d45bd26f4bda6d1b32b4b23285255bcc4f93832018428cbf5f6bc8274db73c1371e24e6ad7ca0f05d","ssdeep":"1536:idm3Zg+GYL2IlptUjXT9yRKhqcimDLK4ypJh3O:idm3BL3GsRoZiSDeJ0","tlshash":"0b33f255ee83db92c201ae09f49ab8581f06e338926c956037fd1e6f83c258dd0b79c3","first_seen":"2026-01-09T01:41:44.262235Z","last_seen":"2026-09-13T12:53:27.433094Z","times_seen":1155,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":78,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.114.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.814Z","timestamp":1789303967814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.114.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 57964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 12:06:47 GMT\r\nexpires: Fri, 10 Sep 2027 12:06:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 261960\r\nlast-modified: Tue, 06 Jan 2026 19:04:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57964,"size_decoded":58777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 57964, version 1.0","md5":"16698fafcf105084ad625d2a839d3a3c","sha1":"532b638fa58df66062eae75dd77581467564eeec","sha256":"cf7b8344807a316e8db054500a2b44ad9346ffa00763fec203ab5aa1c99ff602","sha512":"95f7ae2613ced115776a27097d8b1351b29c4a1af515e40fd4b0e0a39ea10e8ec23e1db3654c64ac81ccb55c27ce8b733aacc283362f2d24d89f5a668aaaea51","ssdeep":"1536:x9+jUWfnLKVuTrE2zCqYl7+fXUX1HyXH0lBvl9Z:WKofEsCq6EHAZln","tlshash":"0b43028106e7758cb92872dd9c153cccb6d39af74fd184b898aa4779e70513ca084ec7","first_seen":"2026-01-09T01:41:44.274419Z","last_seen":"2026-09-13T12:53:27.447549Z","times_seen":1083,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":76,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.816Z","timestamp":1789303967816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 18:31:07 GMT\r\nexpires: Sat, 11 Sep 2027 18:31:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152500\r\nlast-modified: Tue, 06 Jan 2026 19:05:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76800,"size_decoded":77613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76800, version 1.0","md5":"4118cc8cac2655b9ccd64a91698f0ecd","sha1":"671e3c1e2be85665c9d35903b5345ee8f9d3354d","sha256":"b3b2374881f4cd93f239820dfd91f0fde8d52f8f92ba2888f7ab9cba21e4d7eb","sha512":"37b21323db1521169b46960daca80dd851683d07eea674d89a322ffee1a64b3d82bf950c3b61327e6890df9ca1fc2871c0f4666a6c88a57867a9ee91368cdf03","ssdeep":"1536:0XBgtzl3QDJb42SX1r6Jftba4gWaKx40rXLUkjMnLPbCRPaDy7U2bwRoaaZ0gTN:0GP3QDJbbSefNNBbLAnLD2bwRoygTN","tlshash":"147312595883df1ebe60c4e3eb5aec3770841387e178051102e30aeeaef9cee5650972","first_seen":"2026-01-09T01:41:44.272407Z","last_seen":"2026-09-14T18:29:38.652119Z","times_seen":1223,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":66,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.803Z","timestamp":1789303967803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 12 Sep 2026 03:29:59 GMT\r\nexpires: Sun, 12 Sep 2027 03:29:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 120168\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46192,"size_decoded":47005,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46192, version 1.0","md5":"5556d1a216ad1866c0e9d00290a3c9cd","sha1":"f534be976ceb3c29d1ca0865df117eb692bbfe29","sha256":"76c9ddb85ae4578cccd35ae4f6e6bbffaa2c8c2aec0fea17d3c17c84a3c6f7d1","sha512":"6859702849475921b6aefa36d2ad5dd4239719e145d83b05abd61fd57b1108a0a181967b0a15355e52721c1d934b2e7f2634bbaa2e860933b89e9e2f7cc8f823","ssdeep":"768:LP8gIehhR1z5H3GLFFRXcp5ZEZaadTlg0YhQarNwPtHVY9fS4fuYWbkZDVX7mUXn:LfPR1zlGJFRUZEZaaplg0YVu6pbfrsk/","tlshash":"8f23f200afad935de5b62b3cde79941019fd79ea8c3418e9c17798ca9000e7bd0ea573","first_seen":"2026-01-09T01:41:44.260322Z","last_seen":"2026-09-13T12:53:27.440648Z","times_seen":1251,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":39,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3q-0s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.823Z","timestamp":1789303967823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3q-0s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:43:02 GMT\r\nexpires: Thu, 09 Sep 2027 10:43:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353385\r\nlast-modified: Wed, 10 Sep 2025 16:22:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22976,"size_decoded":23789,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22976, version 1.0","md5":"8a60890dcf69c08feeb58fd58957bce1","sha1":"bcfe95da859bee1bd1d02549b549e44d0b05146d","sha256":"231d487a993e28bc5567c2be8da48acd8e0a209891c11448491eab45db0f8d7c","sha512":"6187ddb9cf9a136c19ba871bcc229bbda49a169aaa54c5cc2d23eee4a5fb1a8fb3c2bfd380d36a0a438fe76e19dd93578cd4cb4b8a2de7172f99ac3e3ee14f18","ssdeep":"384:nNteL0kK1GkvmnTKS2SmG5zTkkaD/vv6KJvxzN/10fSDjd5Maeb8l9ojIml:nNgkunT6NG5zPof6a/1qSd5MYla8ml","tlshash":"c8a2e1c71355d50becb93d7cbd4d53ab634923a712b0e0468fa804c663464d0c609faa","first_seen":"2025-09-11T19:45:57.90254Z","last_seen":"2026-09-14T17:15:26.920763Z","times_seen":1803,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgerwallet-app.cn/","date":"2026-09-13T12:52:47.826Z","timestamp":1789303967826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ledgerwallet-app.cn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Sep 2026 08:23:47 GMT\r\nexpires: Sat, 11 Sep 2027 08:23:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188940\r\nlast-modified: Wed, 10 Sep 2025 16:22:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22788,"size_decoded":23601,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22788, version 1.0","md5":"15481e4eab6dc3277d89f1d5871cf08f","sha1":"25ba8a978a3a493ec9f835f7f2cdefe16b55b295","sha256":"2d797dd8b35dcb3413e1af9d7052b3f4f8c341a147cdcb01f4f06af80db53289","sha512":"bb5ba24476faa25680e6644dba33a98afca6ef0936f7be6ee3888d09c2d7b658ccfaae395f173ded5331529e4548b25d923490be1363132ed30e0e368812dace","ssdeep":"384:Jc/2c7dFz93/eRqONl+60qnSY8IkG5zjP2Z8VgG0BFrnIZbp/QPGIZgdT9mEl4/2:JM2c7dZ9vkq68606SVzGJ2uuubbYgDmM","tlshash":"36a2d0de44d674a2d12f32f43c832d1c13bd3558075ad59b6b1a068bf2bca7621e3527","first_seen":"2025-09-11T19:29:34.815552Z","last_seen":"2026-09-14T22:38:40.624719Z","times_seen":10334,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
