{"report_id":"6019aac2-b713-4775-8d86-de985080fc30","version":6,"status":"done","tags":[],"date":"2026-04-30T18:14:56Z","url":{"schema":"https","addr":"wallet-legers-io.pages.dev","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wallet-legers-io.pages.dev/","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"title":"★ Ledger Hardware Wallet™ @ Secure Crypto Storage","dom":{"size":5696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"44a8743aefd8eac25f1ad7a79e6468f1","sha1":"ce5d744fe03e03aa157535df7f71ac53413053c4","sha256":"869c0ee0d69604cb20289e748c84cd91ed02020eb71d6ec63dfaf44516941fab","sha512":"620c5de691d9eea2781a66f048da175453afff9d728f6bed0a147e8d871a6f8592e7e7014ad6e775d767996ad5a096e0b387d7684c68bd32578d89dff1c96de7","ssdeep":"96:nBpXX7yC8IW+4lfVdiiHhBdhMfel3zK8FU4qMI/wNoZ1IW7iHrOq5Am+LVlZ5kgr:bro+4lXvhMfmGe00a7iH6qejVb3","tlshash":"cfc17213b3e53509929342bbbc5293f97b7a9447d11e9ab627b4500c3fd02d18ab378e","dom_hash":"domhashd68639c6f96ab28365b7820a2404dab1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"wallet-legers-io.pages.dev","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T18:14:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"wallet-legers-io.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wallet-legers-io.pages.dev","ip":{"addr":"172.66.45.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-30T18:14:56.407264Z","last_seen":"2026-04-30T18:14:56.407264Z","alert_count":2,"request_count":2,"received_data":13289,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wallet-legers-io.pages.dev/","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06d2de6e5e2e30e40fd5feba86783e37","sha1":"ef224adc31a025575606d651d8a24fef07444ac5","sha256":"de5199dbb54ce9eb674f7854bf317f3bd6de48193e17a7eb6bce350500a5b257","sha512":"efec4f06ea773edd1512994b715aded312bba0bd199eb65729873449a880c4564acd2c36565b75409c5be1296024258a04a9eed4b179df6883071801436f93a7","ssdeep":"","tlshash":"9dd0cd543270753440bf41b7b54ba3586a1501157057e4a169fad5045f7156785c3dc7","size":282,"data":"","first_seen":"2026-04-30T18:14:58.964801Z","last_seen":"2026-04-30T18:14:58.964801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wallet-legers-io.pages.dev/","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T18:14:34.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet-legers-io.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 17:21:54 GMT","end":"Tue, 28 Jul 2026 18:20:15 GMT"},"fingerprint":{"sha1":"EC:55:A3:DB:59:72:35:78:AC:94:2B:DF:B6:A5:4B:61:EE:30:F1:A4","sha256":"F0:A2:7B:4E:02:6F:E5:63:8E:44:B6:1D:64:E5:B7:C9:0C:09:2E:C0:5C:61:DD:5F:01:FD:40:F4:3C:8A:C9:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wallet-legers-io.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 18:14:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKqqIkGhFDzPS9IFUYod%2B1wI%2BFxdGfidlf2dtK0B4Ts%2FAGO6RMImsEOb5Oub5%2BaVKmDZPrKc9XGKOAfcByZLW8QFAGURI%2BeByWlcHFSXhRpZyWc3O2OI7KcC5ZDHVTBluqsok6rJJ86aRwhmcA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4886e4aa3556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5907,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"867c06303172ae954557bb026813accb","sha1":"2e9a0e77fce6a75eb37425633fdb08c3411eb5dd","sha256":"0a38f5b315ddb76c9b2b760c0053bda703bb9ce80bd8ffe8c7449b4cf8bd0730","sha512":"3fb368cd54242c90b5fa6617e6949c4ab986ae4a83d303b1ba746528599eb4410053a169212955dbfbf4b963a94d53b067a3f9e9fd3c1161874ea1ce3bb40cdf","ssdeep":"96:SqXX7fjP1EOWWwVgbQyydUfEhOZigIJK8FgdSBFIywG3RSY4zFruiHrB/59mB94j:zrZRw8aUfEEZiYehYTrNH9/TePM71h","tlshash":"a8c1851273c53809527353fabf5293f9be35d096a21a0bb637b5500f3f906d48a63a8d","first_seen":"2026-04-30T18:14:58.963149Z","last_seen":"2026-04-30T18:14:58.963149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":23,"dns":8,"connect":1,"send":0,"wait":278,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"wallet-legers-io.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallet-legers-io.pages.dev/favicon.ico","fqdn":"wallet-legers-io.pages.dev","domain":"wallet-legers-io.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wallet-legers-io.pages.dev/","date":"2026-04-30T18:14:35.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallet-legers-io.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 17:21:54 GMT","end":"Tue, 28 Jul 2026 18:20:15 GMT"},"fingerprint":{"sha1":"EC:55:A3:DB:59:72:35:78:AC:94:2B:DF:B6:A5:4B:61:EE:30:F1:A4","sha256":"F0:A2:7B:4E:02:6F:E5:63:8E:44:B6:1D:64:E5:B7:C9:0C:09:2E:C0:5C:61:DD:5F:01:FD:40:F4:3C:8A:C9:76"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wallet-legers-io.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wallet-legers-io.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 18:14:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NDdrFdXdqwN%2Ff7vmpnZw72JWp1HPePfjDIGaWcxTOii57YLajyvGjNLZc2k52rbRP2gS8cpU%2FtRJLPURgFxYlpxRKNiifJaea5UVS7rhbzHzSuQah%2FtQ7kaqZ4hQesUEnf6LShEidEPoHnD7jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4886e79b37783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5907,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"867c06303172ae954557bb026813accb","sha1":"2e9a0e77fce6a75eb37425633fdb08c3411eb5dd","sha256":"0a38f5b315ddb76c9b2b760c0053bda703bb9ce80bd8ffe8c7449b4cf8bd0730","sha512":"3fb368cd54242c90b5fa6617e6949c4ab986ae4a83d303b1ba746528599eb4410053a169212955dbfbf4b963a94d53b067a3f9e9fd3c1161874ea1ce3bb40cdf","ssdeep":"96:SqXX7fjP1EOWWwVgbQyydUfEhOZigIJK8FgdSBFIywG3RSY4zFruiHrB/59mB94j:zrZRw8aUfEEZiYehYTrNH9/TePM71h","tlshash":"a8c1851273c53809527353fabf5293f9be35d096a21a0bb637b5500f3f906d48a63a8d","first_seen":"2026-04-30T18:14:58.963149Z","last_seen":"2026-04-30T18:14:58.963149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"wallet-legers-io.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}