{"report_id":"74f41204-5204-483e-8f5f-da2cd76e5324","version":0,"status":"done","tags":[],"date":"2026-08-04T02:19:20Z","url":{"schema":"http","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"title":"Private Crypto Banking","dom":{"size":59773,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59703), with no line terminators","md5":"86b9deca8929dbb498308c8dd199b24b","sha1":"54d6d3d9cb995400503aedc94b936f925f4afcab","sha256":"4b3c0b3f4ad5332ef72a914224c98836eeb9169c5f4a3db4d15e4a8a6aad32dc","sha512":"5f5c848c067ef53014471f423db411784e3b0f55b81299f76201dce5f702babb41f7d0b682da1988a625d89e8421962309f3688773870aa45e4cc187b62f554d","ssdeep":"1536:o+WmjmdO9zyXokbL0WHAE6suAs6L0WHAE6suAs2BR6r3nTW1AO:o+W7Xo4L0WHAE6suAs6L0WHAE6suAs2/","tlshash":"8243a530a545fa2a95a3cdedb2796f6552caca3de917cc5ca3ecd38503c5c322b61e40","dom_hash":"domhash72cbda57e28fe667ddb7add82d331810","first_seen":"2026-08-04T02:19:25.867064Z","last_seen":"2026-08-04T02:19:25.867064Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-08T02:19:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ledgergroup.net","ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-06-21","domain_rank":0,"first_seen":"2026-08-04T02:10:11.280877Z","last_seen":"2026-08-04T02:10:11.280877Z","alert_count":57,"request_count":58,"received_data":1928921,"sent_data":28412,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"static.cryptobriefing.com","ip":{"addr":"104.25.17.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-31","domain_rank":5423158,"first_seen":"2021-04-07T18:06:38Z","last_seen":"2026-08-04T02:10:11.963272Z","alert_count":0,"request_count":1,"received_data":25529,"sent_data":591,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fortune.com","ip":{"addr":"143.204.238.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1994-06-02","domain_rank":1331,"first_seen":"2017-01-03T14:20:36Z","last_seen":"2026-08-01T18:22:39.327517Z","alert_count":0,"request_count":1,"received_data":276670,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.lookonchain.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-08-09","domain_rank":0,"first_seen":"2026-07-25T04:57:17.208429Z","last_seen":"2026-08-04T02:10:11.952731Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":548,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ca-times.brightspotcdn.com","ip":{"addr":"65.9.46.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2016-08-16","domain_rank":165462,"first_seen":"2019-04-03T11:58:48Z","last_seen":"2026-07-30T01:20:30.46946Z","alert_count":0,"request_count":2,"received_data":1062,"sent_data":1377,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"thehill.com","ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1995-04-22","domain_rank":3581,"first_seen":"2013-10-30T05:46:34Z","last_seen":"2026-08-02T18:42:00.462234Z","alert_count":0,"request_count":1,"received_data":120507,"sent_data":607,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"image.panewslab.com","ip":{"addr":"104.26.2.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-10","domain_rank":0,"first_seen":"2021-06-22T09:43:21Z","last_seen":"2026-08-04T02:10:12.180451Z","alert_count":0,"request_count":1,"received_data":4157,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/16ksa~32zaksw.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c6833c33ccac7df1c2cdaa346eef8b","sha1":"a45f60c01a93360a00cccba4c08e90dc42bf421f","sha256":"ebff0f3f3d44644dcc6875faaeb8c27072beed01aac5ca41f3c5dc63aca6174a","sha512":"57274ce5364f4b69cd5f226ad10adba06795fdd8f42495b9e6cf972bcc4bef569bd8670fc0620d2be810e6d4338f629cdcb4701eb5128955756f4605978eeadc","ssdeep":"1536:HFhA+g9ME/bx6sgoSdZNIjIQUFOQd449p4pzs/psnyaYbz+mrpeD4C0TT/S0LWXB:Hy7bxaocZWaFOQd440NYbSmMD50n/mXB","tlshash":"94d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","size":136911,"data":"","first_seen":"2026-03-25T06:49:16.81672Z","last_seen":"2026-08-04T02:43:09.025157Z","times_seen":720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0o4dpfc._c3ls.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a902371f87ec86bd374735dc091fe9e","sha1":"5cf091635966ee889a6aa10e5ec0a2836e4666dd","sha256":"f3ba9d50cf409b71c8fd39260146636ced0f630456edb8486ea564445144ecce","sha512":"7ac11ab6259cfba8b9e309a98fb29ef1289a395eedfcb5e3f132c1b3609b1eaeb1a34fa69f19e91519a64238b590150a0865bb8da036525a1078fe41e681d66d","ssdeep":"","tlshash":"ed414208e1429ecca957158c9a3fd00d62ae667ce70fdc69f0fd94722b5141a6de3b88","size":2107,"data":"","first_seen":"2026-05-03T18:14:00.105664Z","last_seen":"2026-08-04T02:43:09.036869Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f85461a58137af570f4cad633549a7","sha1":"903fa7be17b2da6b0efd933060a756787397dcb2","sha256":"50f59a5ea222c7f1f6f0e8a19eb0f89b752a41bdfa4a44d94e80d1ab1c9cad01","sha512":"1040e00f0f6373dab6e1e161887d4399d14c6f780e2c8ca12659d0d2889937cfdff36244e646e969906eaa837931e774fc0d134bab0adb3a2fc556c60cef5ce7","ssdeep":"","tlshash":"f2c02b7d328c513348fa587ff8a8b7e03d3336005ac20602c01d88c028fae4bae10f68","size":150,"data":"","first_seen":"2026-05-03T18:14:00.176461Z","last_seen":"2026-08-04T02:43:09.061534Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-04T06:30:20.755352Z","times_seen":213557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c8ca45ff7694c23ad9e15fd7d18f010","sha1":"89b9e5e15bab17f8d901216d5703545bdb6ea003","sha256":"5e7ece267ffb79a828212cdbea0e4e94f85d7c631f72af67440aba076933a768","sha512":"34d1ba26427c71e87fa58a80188c5a3b7a177dcc52a43bd81f521f5894c0bdc909f121377a7cf778e5e3e1a026e5b770b340ec67f6a810e8dc3cc2212281324e","ssdeep":"48:LoslL0mLkRslL0mL1oZsslL0mLu2UslL0mLCrslL0mL32euslL0mL1uslL0mLpA2:LJK8L0Y2lLp2eLTAyBVQ4Qc","tlshash":"5091f31ae80efa406d31cc9f217f1f378ac6dc3792306169b36cca9952a557703e99d1","size":4353,"data":"","first_seen":"2026-08-04T02:10:19.614227Z","last_seen":"2026-08-04T02:19:25.954012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fcd6616fd812e560776d29f815e3f391","sha1":"f55cf52cbbab81ec219aca4344a49cccea77dcb1","sha256":"6650eab53a56bc09c0e93bf232529ece4e2daafbfe0a8c0faff7f69117d619ce","sha512":"50bdc2f169509253bc7a32feecbc245eadeb54448a7711ac9296b500fe8dbf1b9466ae5b5b07f50883480b18e594bda92a925f691cdadf205d010818f1f9d1c2","ssdeep":"","tlshash":"8011a14af80afc84ac71dd4f617e0f3785c9dd3a827450a8b39dce8a42615b703c998a","size":911,"data":"","first_seen":"2026-08-04T02:10:19.615938Z","last_seen":"2026-08-04T02:19:25.955798Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8fffa00158b5be7515aeab32bcae241","sha1":"cce205e4fc715d844a944d9d0a921705a5da98cd","sha256":"6b0f338e13a762d852f11ef9f8518ed2d38aa694f1194cbef7467bcbd8d8bb8e","sha512":"44d3e03704c2b72cb0c58b5295f3ada1d93f17bb8da01e60b7926f573bbdc0ba0f35b1a225c8db48aa9a2eb879d41fa6f6f830e97ccea79d0e54570fdfb6e9fe","ssdeep":"48:LZSnli0/+TjLcQy19aXqgs3R4+lJWV26+3bd3Q0Jj/yg65pP+/+GOj9QBv8fbMc1:LUkWDlJtxnpngp5fH1","tlshash":"d481f61e7c05de06dc7e7c6d023e9e3a14cc8d778760deb8819ece580a4a5b62bd9c81","size":4184,"data":"","first_seen":"2026-08-04T02:10:19.617343Z","last_seen":"2026-08-04T02:19:25.957408Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a1e43a6c005a9edc6b4cdb1d482d0c","sha1":"cb7d20837a4291508379e3b5b699d1dcad2b53c2","sha256":"c987a97a9e7c024936a3b6105f0c765b77d7dd89176314498bfe0e47fa63cdf8","sha512":"284c8d1456bc94c7ff810809ff4eda8ab02ac1eb746996b8dfb8b7096f98dc09a905396b7b894b789c39eb46eae204c77720f07fd6550ffb889606304e7f2157","ssdeep":"","tlshash":"a5b09b64e045fda555a505616625e44523df508d19541450311395551609d141717dc1","size":112,"data":"","first_seen":"2026-02-10T13:33:53.162711Z","last_seen":"2026-08-04T02:19:25.959005Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8491d67a5f1362729e2ae42fc33e6bd1","sha1":"ad5bf7c729d87031c7e99a4edebb2fad38aa1f68","sha256":"37ce224e47bd7edb4c843f81ae362d99371d337e9c85183a64824dca44b659f6","sha512":"f6e3e5925267a98d28a6bd27970fea1b2131ecc8ebe9b48d9952925631677c421fc45a1b9aed4dab4a7b4038a75f3807deafe055ee1c5e79d8d1d02fe3504d92","ssdeep":"","tlshash":"acc08090cc43cc1dc6670f261c3a1c3531dcc5b4074955469dd5d9291985b3115b5d89","size":178,"data":"","first_seen":"2024-08-20T20:45:31.74662Z","last_seen":"2026-08-04T02:19:25.959846Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"aeb2c45fd1232682bb08c99085e70570","sha1":"3fdc42ba932952388a129396c59e143913b3f863","sha256":"7717205c4e1acf1defa38c76b949f92003032e97a7644bc1a7b22b0acabf419e","sha512":"2412b2cd196a0c4d4ce3bd9aa068a0914976a20bdc4045fb8b26c224f3a64e4d85144a5db4956d561e73d72af807bd8f81329d0ddeb3e9d8879573bb46b2a279","ssdeep":"","tlshash":"d1118c15ec1afd15cfd2cd5d157e6f7681ddce3a42204658638ccd8402a24366bd9e91","size":892,"data":"","first_seen":"2026-08-04T02:10:19.619712Z","last_seen":"2026-08-04T02:19:25.96064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/04.i-__.as.dk.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"985425cd1ff033e452bd6e02ae135b4f","sha1":"0dfaedb36d6c92e5f684909c4bdcb626a9567acd","sha256":"b0222d1e95e92609c3da7c910a1962ef47567af3a5c9b14ac1e8134df9b9ea60","sha512":"cdf93f2816aa08b9c126aa2c6b2cfd68c4a73ab1459f1947ef2962db1dfc4c4d80497dcbb92eb9da353e5e562e65cb2e00e69ebfc0d43b0fb4a3a22b508c2010","ssdeep":"768:IS6Dia4/coVPkpc/s+zYXExp7ly1V0U4v:IS6DiZ/coVqnY","tlshash":"dd13e7b132d4faa3539341e0e43f2016f2780d7520ad6470b7e89c9b754d88da6befa5","size":44022,"data":"","first_seen":"2026-03-27T13:47:10.04459Z","last_seen":"2026-08-04T03:29:05.968259Z","times_seen":1092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0fobcf1mdhsvg.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"87493ea9ad07ad5954ce57562153175e","sha1":"aba3f856f74c94e953413fbf4bf04fbafd039c6b","sha256":"e7b956ba57b8b72268b37e283649419b44ff5f5cbba70b2a8f9a4c46541b30aa","sha512":"26d54d285cc82b5415dfa5caebf9af89a3974aa4729885a36934f2b11164ac82b55fabda395f0314596432c35748ccf376293d0809e6651134c3d4a388daa3e9","ssdeep":"768:lVJYwFAoy81xzNwpSitTjtV64bH6BcW6aPaR1i3byrqO6KhU2l2gG0j24D2DhQKQ:0ozxxwpLtNV64FRjf/0cYXm8fBMhF","tlshash":"fca30d24e155afdcb92749a4796ed00c601fbb5dce0fc869faf8a8152e4a4c47e03bc5","size":107397,"data":"","first_seen":"2026-07-31T04:26:56.866217Z","last_seen":"2026-08-04T02:19:25.933853Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0i.l9589uvx0j.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","size":54763,"data":"","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-08-04T05:20:00.117908Z","times_seen":3524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/07bslee604mrc.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"44316a595974994f7371d709f876ec74","sha1":"2df53e1a8b69a48c0d70393115fc1799187c22d3","sha256":"19fdc214b6e2a9c7433336800b84fd607b9dcda19c7116b0d7bf40406bba30a6","sha512":"f61c8f8c78fa4567cdad218e6b4fefb9bc62200d3d333974e98bc891145dc29c0ef9fab09ae32cd8f659229f610528b5ebbb0cc88173766e6e3cc0030ab78f63","ssdeep":"768:Z+6r2t+ewAE/madBD+LXB94RpmiqMH+JrkneOrk1ocuK:Z+6rTiFav+34RpmDMeVknrC9","tlshash":"7e03f980b691b02947e252c504af140af23dfa29a40d4c9cf265e4ea39f5dc995fff78","size":38116,"data":"","first_seen":"2026-08-04T02:10:19.592317Z","last_seen":"2026-08-04T02:19:25.936146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0dzb1v89ku17t.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4975530fac1a061cff082f2be8e0d908","sha1":"eacec5c0e72d158021f153352f191d386b819996","sha256":"3cb2fc7e6d5a3122b6e8a51dec9886fcdcb600a648246a191b6e3d5d4700bb40","sha512":"6b68987bb3d7e4aa87daa14ff530f7f9f2a37962c5191c93933c4d76ba1a1a8369ebb15586f13f2a80b58708f6646ff7c28c51ab0ac2ec939b9db6ddb4cf6d49","ssdeep":"768:/YNoaXfw5rpHiSzzsnVeOh8lRYThQThnTJKXT6RADusK5QoQ0Vvz2y3vT9xspb3h:/YNRIFHiSz5OhGyANTJJ+Iz2y3vT9xs","tlshash":"b8634d99726a7a2643dfc2c530511105a239de5a4448042dbfb4afdfe0e6dc9e3e7bb0","size":69046,"data":"","first_seen":"2026-07-31T04:26:56.824106Z","last_seen":"2026-08-04T02:19:25.935329Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/turbopack-0bqm-jxb130ve.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc055a1d01641aeb68744889211daeb6","sha1":"b552ec0d12273c707b4f74ecd18f5d9aa509e448","sha256":"a560180d2186399cf27d2d13396bfe38a4556c39f4135c66fa3156b1331c9467","sha512":"4e9c5a1c8f6fe912f62a9ed6a39e03de9d66d6daf62525aef89d51148671b9bff25c2e77257b3d2a01581dd5badb5bd7cccb6787f513a5ba147f7f09e12f7328","ssdeep":"192:PXl4gM6A68kEsgdo2YE4hHBlqZyD+03sBT4fCT2cXX6ufH2:/l4gM6YPihlty+sqCTPG","tlshash":"0622b7da33a6f07343afa5ebd06f4004f17984a9145e141c939ca8eb2c354ae85e7f76","size":10542,"data":"","first_seen":"2026-07-31T04:26:56.832355Z","last_seen":"2026-08-04T02:19:25.920122Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-04T06:30:20.788452Z","times_seen":374271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0ddv8_bxj_w6t.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9b3b6b594f905ecb810050fd95d0b5e","sha1":"269eb7e4ea729aa40ca9798b5369a16a051b145d","sha256":"09d84e068f9f0cfeaf909663a47cda0285e53e777aea619ff45a1c528174a3d0","sha512":"647d47368152554341077d2f048a1c9453d8a274e13ea35972b3c44de8004a57f5bc4da4380530db1e84c3c723f5e37d41750d894b7ce4b46070dceb32ba7cb2","ssdeep":"1536:OqZcXFG1ygWgDvwd6FtVnBot1Q8Vxj6d/PJ8INqZ32xRI0FP+g8q3lxCvfLTgzna:hcoju+Kt1QbJrNq2y3L8G","tlshash":"1dd3f8e673517122d3cb5199c4af4b41b33b58d8300a443cb6bd9dcb296099962fbb3e","size":134076,"data":"","first_seen":"2026-03-30T02:25:32.689287Z","last_seen":"2026-08-04T02:43:09.057912Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0.rh.w~mypu9j.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33f8b42a9834152bf8af2a432d52e76","sha1":"8703b1d47509ff834b54e6a508b189d1e60f5875","sha256":"bdc650a7d35c07c19ab64e6cc920f3cb4581a7462dfe7e55e0aa5e38f9f5e239","sha512":"97741e48ba56c8f24ebfdfee882aad43f1e745b1039b50bb69852b55a6ccafe011d00a7d9191b938a3090d99cccceb5ee41a43ee5f9c8463182273d188d89e85","ssdeep":"768:Y3gvz/gBVT1NYunQ0UyWOzjiZBm2XtBl9Qlmb2BOz0uQulKXAnqiG50YgV1zFVTL:YsKV8evIRli68eKXEzNhRfMLwx+TK15","tlshash":"bfa3f014e155bfacf9670998aa6e912c612f5f98ca0f8cb8f4f87c251a450d43b13bcd","size":100099,"data":"","first_seen":"2026-07-25T04:57:43.719581Z","last_seen":"2026-08-04T02:43:09.051571Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/049n76~bl_5ob.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d2f7d1ab3b4a6d19b4d46148a41738","sha1":"28803aa4f5fb777c4352fb2b7285565b3bccb285","sha256":"00cfdd040c46cb9950b01381906bc244367b24f816f9309797e7b16d13431aae","sha512":"36e082986ece051e258c988b048b9bb78c2c80b99fccbde06d61416a7f1ad0647bc24d052ab23bcd4e7cf448878353c1c559250d32d793719543ef02ec0891cd","ssdeep":"384:rDOFNHk5nWOq3PG5nUf1T6BVyHExU7cmEwE+EmbmElzCJafcAVO3ucZKwQ:mPHwnG3PG5nUtT6BcH1GjvmbllBfcAVv","tlshash":"c1b2d764b084aeccaa974184a92fd04c712e2f3cc91fcc78faf8bc7516554957a63f89","size":23965,"data":"","first_seen":"2026-07-31T04:26:56.869709Z","last_seen":"2026-08-04T02:19:25.944588Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0g85yg1df2bxt.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec037f59a4323caca92bb61d73b7eaa9","sha1":"c061ab5cce46ac6c1318203efcb38d794f33bc48","sha256":"5015e4b717d4189e81e6fe9ec649b58bfae3885725c159204727e7fb42b8cd12","sha512":"242e8c8953ff9c8fe6b872f3d23815c7de956b9af1fda5ea211f0041a6df8f5347633628a0f3972672c6cba5e869fc1c9b1f7a6dd75769bb5f97199d81fe205d","ssdeep":"384:q+FjBPxpnakqZq+QOXXd967qf8J6otgG4uaFQW9Uiet6eUhp1NEBYjYvJCHSW37Z:q8j9naZZYGd967SBNEBqsCz37XSrJA","tlshash":"f4e294a971d5f4910b9354b5803f500bf23e0db6286da0a4e3f2dceab9a055dd133f9a","size":31932,"data":"","first_seen":"2026-07-31T04:26:56.877606Z","last_seen":"2026-08-04T02:19:25.932452Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/14dy0jim2o7h2.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"26d29d33266ed422b7fab6e7e16d0e3b","sha1":"a78c8c980fd42055e5d098d17227b33cc0ebc386","sha256":"13fba609e01804a6558f6f61dc96ae6e1909a8ca62b501757f7b60e078d207b6","sha512":"695c3c59f733b0733bc11a47db99707783ac68b896b2c0ead4982207042da9f3d32db9cc44d6892ec5ac560bc146377eb23cf428ed0098173592bacaea9c35bd","ssdeep":"384:Z1X6/w+1786BIsJAMShhP09Weq5jXqrEIj/KKISfK7uJhyp:HK/zl86BIsOMShe9WDjXqR0Sfvkp","tlshash":"7dc2a57e5b98a48e2787d2888d3ba00597ee023c314a9c55f3de58b68361c17d8f3f16","size":26906,"data":"","first_seen":"2026-07-31T04:26:56.848432Z","last_seen":"2026-08-04T02:19:25.912022Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/17xn63i9hj2lf.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b70d1719dcd1d3d315ecd6262d96878","sha1":"31c80d4311ad2a5ac0a460188165429e619c363f","sha256":"03c2c83d1743fb5804ecf299a037e5154ceaedbd2a6970fb95b380d606a4316f","sha512":"7047c57df22fbf8a0376dcaf016af8bc610c5a6e69978e56bfb97227a7d7bf0662b27684b847c30527f62f99c091d6dafb7028de519f24acb299cf85c7a83d88","ssdeep":"3072:g1Ltf0MDKFNY7770r28trhE8azbP0NqZJyX8QMAIGvn+K1toR:g1LtcOKFNYfz8ivyMENvn+K1toR","tlshash":"0224fbe83995f6626ab302b710af18037338252b280d4d60a351fd9db57845fb17bf9e","size":227651,"data":"","first_seen":"2026-04-05T14:03:06.210328Z","last_seen":"2026-08-04T02:43:09.026727Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/01w.kead659u-.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac4616dacf20f79a5fe8de0239e93736","sha1":"b59c40dd77c295a0fe106aa2e7840dfc7669b3d3","sha256":"4a428ccf3ffa7b4389104d5fa86e232c734b8db3480bfbd3b5c8d5d4575c405d","sha512":"9b92ffd5f584d711a61db8494a268220acc1837c140a4e7242fa052ebf94babde5dd1d3834c4a3e08820057475b19eebc0b45d4353a7c5aec4da5953f653f206","ssdeep":"96:qpCGpzrBDHeoctuv28bWuq6UUFv2H0G8YnTquSE9X9JXiWqAtMqStIPv2BwbnB+4:qpCGVrBDaqWoUUFeULOB7TtJBMrIm628","tlshash":"2ce1d9b53091b5d092db0180812f840df33f2e39d45fa8a8a3fd9cf51aa041db2a2f95","size":7310,"data":"","first_seen":"2026-05-03T18:14:00.14191Z","last_seen":"2026-08-04T02:43:09.04331Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0hpnrek~99o9g.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"42aec61e4fb8aef2de59acd573968811","sha1":"fb2286efc6638222f2adfac95db32f61996e57fe","sha256":"9d89f05a4281e12a75bae637f48f7ce484d89b018b733f584a8e81135ae90cbf","sha512":"f8ded41bd63496d9b339cbbd194d42a2ce9ff3895cd2b14f0522334d5f7073c1bc08455cf6203d19eb8eff9aa4c5f13541c57ed016d58bb1b799c10d0bd3428d","ssdeep":"96:YL52j45y5Iie0RES0s0QPf59GCM7saERVV9GCa:bDhEBs0I+FZgCf","tlshash":"beb1d811f295d88ab76a009d25b7b00ef224342a9b75e8727bdc18f25bc01f57d2a7d8","size":5372,"data":"","first_seen":"2026-04-05T14:03:06.208715Z","last_seen":"2026-08-04T02:43:09.029689Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/05pa1r7xmxb8v.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"05e5e4d6b1ab63b9a2af533b2be1d0dc","sha1":"1eadd58014196c3e7d8a2f7e37a3b8d3eea3ea27","sha256":"7ddfa0182ede15f98815f85b7efca83e58bf8386ee820b001c4d9b87213a7b44","sha512":"d081bdce0a9ef94952af9b0de95ae9bf25b3c456b1bfdb3a762267e36abaceb4deb293e8e6ca33379fc8f9906b3e4be96ae7509d2340e7bbb781c445862c5ed6","ssdeep":"768:B1rrih6BcH/3LnTt6pL09WDjDhW5yMWFjwTZ687ieeFl+80uHKyg:LviEBcHTTa4WnDhWN0sTZ7idO","tlshash":"cb03f87e978859cd6a43d2884d1fe0085aed577cb24e8c24f6eda8728752843f8b3f45","size":39086,"data":"","first_seen":"2026-07-31T04:26:56.899952Z","last_seen":"2026-08-04T02:19:25.908709Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0mi-yl4by_h7i.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7793c6e7a41ea24171852df2ca984605","sha1":"94c89cd6886ca3efb282926103038c8491fdb316","sha256":"b3280b8342944ed5401e0329baea9bd2d7174f3ea8140ff37d47280d32a3bed8","sha512":"691127fb85198ab3e0c0b53620887b99819d12ddca35e43348d7db2ab0fb82e50a1840b4875541b12193bdaf95c7f4ad7384fb9353163ccb21bb5efc03d73ba5","ssdeep":"192:mjc6AMZ8sGjb2mHtnGWUpF1GQ8iHL5ghMGIrD55R:mokZ8sGjSanGllh5vp","tlshash":"4a12c6dab2c5f4de439391c448276002e27e0a74244e9954f7ea98fbb660d0f90f3f69","size":9515,"data":"","first_seen":"2026-07-31T04:26:56.871102Z","last_seen":"2026-08-04T02:19:25.928687Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/05uj952y.wyr0.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca87a43860df0bbe4c66c999ad7a463","sha1":"e6438cc5f7b6c018ecfeb4786a6b58aabd9e9366","sha256":"5f6b52ae0bda233718231e6ff2921f155ec799361ee08a977205c81f1ac1adac","sha512":"e673d1491a0982f784f38740d1fc15298ed636dd79f7beec375e05b4e944ad6bc07bcbdc6111b49717abe82425bd1817b738c56f6300bd23e08ba4f9d1687112","ssdeep":"384:ngDaNIFfEp6E+Ff8IiU5TFVT54UZg2oUhitiG/jXdjzV/KtPlOnZHASjFT:gDV5Tjzg2oUUBKtMHRjFT","tlshash":"c2c2b736690709be2aee93d7e05cead4dd395702d0098b4ce3874f319b49be8118bb1d","size":26583,"data":"","first_seen":"2026-05-03T18:14:00.144246Z","last_seen":"2026-08-04T02:43:09.050952Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0ddgdwm51r~6p.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a9afd39b35e959852ab63ed652b22b5","sha1":"dd5c4a7156ef4f6fab435f4ad0baca28876dad2d","sha256":"83d23413483cfea68f616ed26102a6f0e3798a389abc51cd6769ccb77283ca9e","sha512":"68ee0ae4b2ed0fda8fe9f9334c7ed842ce11376a92f3b65d484765693a723b3345b192ed3f5ca14b32982a3636e434563f3912f68c25ec4f97ed867caba0dbef","ssdeep":"768:JVWLLmg/PDLIi+mMbPMbKTyuWPColh+fp9aYZjbqyFhV7Y6GlKBDT7JZc:JVW/mgTLIi+mMbPMbGydudbqyFh9GlK2","tlshash":"f0e20ac2f2b1a95e6f3ea1ea340d010173ad5d56542f9088fbb86c962519bc5b0dbf3c","size":32670,"data":"","first_seen":"2026-07-31T04:26:56.864778Z","last_seen":"2026-08-04T02:19:25.933148Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/073b84iqt1p.o.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c3b2f9ad20b84afd07998e05242ab3e","sha1":"e934251ca916af8b5b472fc863ba0646c1b7b7fe","sha256":"4a626bf12f66cfefa6b81c4caa6f72ea63295d011774c29aa8b4886a4ff52eb6","sha512":"115a467f2b07b35b06288328fc3100c6ce5ddf5e82f66b7dfe88cbf996e7f49c485912c636b46eb77bfce78dbf2e1699ebf320ce7bcda55f2d8d0a5f6c6713b9","ssdeep":"6144:Gbu8fp3AV+GZuXi72r9/vsTrMi89RLJG+Vd:gi7G9/vfT91Vd","tlshash":"01444ca573ff6a2a07e6209b10da0105eafd4da45cfd4c95d29c465eb3d8ca0a073b3d","size":270099,"data":"","first_seen":"2026-04-26T20:25:26.48281Z","last_seen":"2026-08-04T02:43:09.056111Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/01p8x36k.urzm.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dc072ee7143a14f806f2d362acab9e8","sha1":"38da81165f5e3ec9b9ae8858b759d0ecf47044d9","sha256":"e14ceb97893c88f82d3e3dfae713b57b8e07e8d53b1b7f23668c4f6973296926","sha512":"f20b3708192966329fb23d65c649ebfa8fdc74fa21a2c0c31cf27d28188948f7051120f84f1904c866d7e32a1203ce9d2ab1ede63216211d138e79898e1299fe","ssdeep":"768:e88UO1b3gmOZim1gCs3F7GwbcHUP4f5yoy1lVqesQ7Shmk:e88UO10mOZimZs3F71bcM4fatsQ7wmk","tlshash":"d52319c5b321a06143d7519394b60103f32e9988580a445cbb68defba9bced9b2f7f71","size":46926,"data":"","first_seen":"2026-08-04T02:10:19.604431Z","last_seen":"2026-08-04T02:19:25.910317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0e73g81fw~u-i.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de10f14a40077f9af55bf2790b697c9","sha1":"a304316a0fda6e84f6d5c5ebca38d76eb8d73a14","sha256":"59c17445a0ac7036cdd323cd67d67061b467a82e2af12acf010bf4e1f1586e93","sha512":"5e31c00cc04b2f50fae7cbfc31b0f3b8418b317c6389575939fd1d8481ab8da78f6a973437c4151b408255bdabd563c561c56f4a3946181b892b7d26cafbb1d0","ssdeep":"768:KBZMVW68/N068t8+VZqYJ3aDiseD6XIPCotxFQz93VBrVu71/lNpAc8LkVX8:KBv68/+68t8+VZqoseD6XIPCoxUVRk74","tlshash":"1b032ad67752b06213db60f9807b0102f37d9915a84d0468f2a4aceb28b550ed7fbf75","size":38002,"data":"","first_seen":"2026-08-04T02:10:19.552378Z","last_seen":"2026-08-04T02:19:25.8718Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/avax.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.679Z","timestamp":1785809932679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/avax.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"15f-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351,"size_decoded":814,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"003bc7aa598c56b3f6c6afe70bd3fc3e","sha1":"7daaf2c2c53d4cf98c5845318ccea6798b86c207","sha256":"015cf42068eae45803c8570a8c3b148bf5d7fa2f85c73bd98e351742bd29c753","sha512":"22ddcc8ae52d717d9e0e94b724a2b72dfa71a609af474e4417f70ded52c8bba9eb574cd5762260e9fe3966f807bd4d54534a22c721be7c5ef0a8a68a9871ac9e","ssdeep":"","tlshash":"76e026799234da480d488129af4be450202bb06ed0df1324b2c80a15e5c66da740e98a","first_seen":"2026-05-03T18:14:00.126399Z","last_seen":"2026-08-04T02:43:09.038025Z","times_seen":33,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0psgs43j8.pdl.css","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.633Z","timestamp":1785809932633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0psgs43j8.pdl.css HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-e82-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\ncontent-length: 1022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3714,"size_decoded":1433,"mime_type":"text/css","magic":"ASCII text, with very long lines (2110)","md5":"5101fd1465fe289ab8f1f19ec7e9f0ec","sha1":"7c8e0e2cf70bfbbe0cf411aa90910d52cd164152","sha256":"bc58b254f2f51287a3a81289a57e683eedbb7a8534f3cb4dcc2daaa534ef7525","sha512":"a78b4dc4dd89232233c40816bdf464cc959dceb2cdd7d55446e724fef13dc2e4b1efb98a4eed16f881b3aadbf8543a89ecfbdaf108bba656eac3bed8e1c64ad2","ssdeep":"","tlshash":"00718a34511bd80ac2a3cd6335ce3e032c1a542046e667639d7e2e788def93b57e2768","first_seen":"2026-05-03T18:14:00.135526Z","last_seen":"2026-08-04T02:43:09.040885Z","times_seen":33,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0e73g81fw~u-i.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.649Z","timestamp":1785809932649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0e73g81fw~u-i.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-9472-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38002,"size_decoded":15727,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38002), with no line terminators","md5":"1de10f14a40077f9af55bf2790b697c9","sha1":"a304316a0fda6e84f6d5c5ebca38d76eb8d73a14","sha256":"59c17445a0ac7036cdd323cd67d67061b467a82e2af12acf010bf4e1f1586e93","sha512":"5e31c00cc04b2f50fae7cbfc31b0f3b8418b317c6389575939fd1d8481ab8da78f6a973437c4151b408255bdabd563c561c56f4a3946181b892b7d26cafbb1d0","ssdeep":"768:KBZMVW68/N068t8+VZqYJ3aDiseD6XIPCotxFQz93VBrVu71/lNpAc8LkVX8:KBv68/+68t8+VZqoseD6XIPCoxUVRk74","tlshash":"1b032ad67752b06213db60f9807b0102f37d9915a84d0468f2a4aceb28b550ed7fbf75","first_seen":"2026-08-04T02:10:19.552378Z","last_seen":"2026-08-04T02:19:25.8718Z","times_seen":2,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/btc.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.662Z","timestamp":1785809932662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/btc.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"3b9-19d360aca10\"\r\nlast-modified: Sat, 28 Mar 2026 20:02:50 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":953,"size_decoded":1041,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edae64fcb50f425e582a9a1429784b70","sha1":"cdcd71434b3e179f57627bda3625ae61240715c3","sha256":"5a8131ecdf855b12cb56080aeeeefea266976529c45b2d58c284a13b7519f4ca","sha512":"8313b5900bbb90d04597b74d7bed7cd1c4cf9c52718a939eb996e531e37b74dc55ba787171eec6cbecbc524bae28cce5376065324dab6b5f8c1ce250ecc5c964","ssdeep":"","tlshash":"511154de16749548699f8d2cff2bbc463012f1bcd52e9ce49aff6d4470c2ae13140914","first_seen":"2023-07-08T18:24:36Z","last_seen":"2026-08-04T02:43:09.052194Z","times_seen":4328,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/sol.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.669Z","timestamp":1785809932669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/sol.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"24d-19d360aca10\"\r\nlast-modified: Sat, 28 Mar 2026 20:02:50 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":589,"size_decoded":790,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f48b6e8a88f7b0aa4b6598aa7715465","sha1":"93e573e9f1376bf17af2ac11f136c597a5eed82f","sha256":"94e47e7c108a338cc4a79b82673d66cfbadfcf4c934ccb9c2ca8f13e8ea7dbb2","sha512":"0a7981504e74f5fef2b3526fb5be81692c5362e01b17fb49c068a2f2c3744c9cab65562a71d6feb837ac360fe290310e43ae3a83a79ab0e1056f4ec0d6653a89","ssdeep":"","tlshash":"91f046e2a15cf5cee04cdd1a24cfb11238a13047f07be4d0bb892684f88b0c7ba04e64","first_seen":"2024-11-08T20:22:57.120472Z","last_seen":"2026-08-04T02:43:09.043962Z","times_seen":4663,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/api/auth/site-content","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.403Z","timestamp":1785809933403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /api/auth/site-content HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self';img-src 'self' data: https: http:;style-src 'self' 'unsafe-inline' https:;font-src 'self' https: data:;script-src 'self';object-src 'none';frame-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\netag: W/\"156e-eWBvvZfCttltMXHcPk4jkafU/dU\"\r\norigin-agent-cluster: ?1\r\nratelimit-limit: 1000\r\nratelimit-policy: 1000;w=900\r\nratelimit-remaining: 949\r\nratelimit-reset: 249\r\nreferrer-policy: no-referrer\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 2515\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5486,"size_decoded":3674,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a125f568c77acfc53f6cd45229a374b7","sha1":"79606fbd97c2b6d96d3171dc3e4e2391a7d4fdd5","sha256":"2bcb11f6fd7ab89395e964fd52b871dd0eba5d4d8a1cf7e94487514b95bb035d","sha512":"4efa338207597917eebeff3ce39f6d8f0f6be7d124ef3a8b2fcd99a4d4a0782a379cf4f76f8cc067d4e7b9edc840f1e784613d7518e44476e92823e115e8b642","ssdeep":"96:7Xy68SnihIhcicZLLvMHEUGR5agljq0Yf9wSeSfGwJHOq2nZ+mx8GWwA4NghqyyP:71nzj80HoTaSYmSecGNqOx9/gczVgIZT","tlshash":"a3b1c63a7b1074354fd706b6baa3474fa5b9058433849c8c85aec05c32e67dc923e366","first_seen":"2026-08-04T02:10:19.574809Z","last_seen":"2026-08-04T02:19:25.874325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/073b84iqt1p.o.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.062Z","timestamp":1785809934062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/073b84iqt1p.o.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\netag: \"6a39960c-41f13-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:54 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270099,"size_decoded":66688,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41230)","md5":"2c3b2f9ad20b84afd07998e05242ab3e","sha1":"e934251ca916af8b5b472fc863ba0646c1b7b7fe","sha256":"4a626bf12f66cfefa6b81c4caa6f72ea63295d011774c29aa8b4886a4ff52eb6","sha512":"115a467f2b07b35b06288328fc3100c6ce5ddf5e82f66b7dfe88cbf996e7f49c485912c636b46eb77bfce78dbf2e1699ebf320ce7bcda55f2d8d0a5f6c6713b9","ssdeep":"6144:Gbu8fp3AV+GZuXi72r9/vsTrMi89RLJG+Vd:gi7G9/vfT91Vd","tlshash":"01444ca573ff6a2a07e6209b10da0105eafd4da45cfd4c95d29c465eb3d8ca0a073b3d","first_seen":"2026-04-26T20:25:26.48281Z","last_seen":"2026-08-04T02:43:09.056111Z","times_seen":105,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0hpnrek~99o9g.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.635Z","timestamp":1785809932635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0hpnrek~99o9g.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-14fc-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\ncontent-length: 1997\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5372,"size_decoded":2423,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2449)","md5":"42aec61e4fb8aef2de59acd573968811","sha1":"fb2286efc6638222f2adfac95db32f61996e57fe","sha256":"9d89f05a4281e12a75bae637f48f7ce484d89b018b733f584a8e81135ae90cbf","sha512":"f8ded41bd63496d9b339cbbd194d42a2ce9ff3895cd2b14f0522334d5f7073c1bc08455cf6203d19eb8eff9aa4c5f13541c57ed016d58bb1b799c10d0bd3428d","ssdeep":"96:YL52j45y5Iie0RES0s0QPf59GCM7saERVV9GCa:bDhEBs0I+FZgCf","tlshash":"beb1d811f295d88ab76a009d25b7b00ef224342a9b75e8727bdc18f25bc01f57d2a7d8","first_seen":"2026-04-05T14:03:06.208715Z","last_seen":"2026-08-04T02:43:09.029689Z","times_seen":210,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/fiat/usd.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.667Z","timestamp":1785809932667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/fiat/usd.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"84f-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2127,"size_decoded":892,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22fc13a6bf40f855532f5c8acc0344a1","sha1":"021b8c9036bd7c10604b99c2cc14a7f237859943","sha256":"b06d44eb491baed8d511301d1e7e60b997f16f56fcceb634285d492e9f73823b","sha512":"cdd3677a3d2ed446bb864b160eceeb9240463633b6f700ab84d8de310dd066210de0736de7e5abbdaa8a42a85e072bd04715104f283399d57732606ec35c971e","ssdeep":"","tlshash":"cd417220a06cf8ad6744c5adc66735f0786f20499727b30cf4609f37bd4a4a779163ba","first_seen":"2026-05-03T18:14:00.090551Z","last_seen":"2026-08-04T02:43:09.022185Z","times_seen":33,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/login?_rsc=1r34m","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.411Z","timestamp":1785809933411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /login?_rsc=1r34m HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":595,"size_decoded":836,"mime_type":"text/x-component","magic":"ASCII text","md5":"2ba2deabb5dee5fa3108450173a371a1","sha1":"e8737b0998086089d4d6f0afb3b28848019ebee9","sha256":"1c117386b9968e3d57eae28bd09581a4b04eb964dcf287019eec0176ae011f2a","sha512":"71f3ac52a43134dfe15a83cc4b7ca1a9a74eef446ad81bf62cd6e01900ae279935f43076cd14e0359cd2ca7c645a5c66d63cc41cc462cbc9eaaba6205127e6f9","ssdeep":"","tlshash":"d3f04c72440dac856cf0e894179ae70b54386a33b0b40c9cc4df8dd407a11791f8768b","first_seen":"2026-08-04T02:10:19.554042Z","last_seen":"2026-08-04T02:19:25.889561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cryptobriefing.com/wp-content/uploads/2026/08/03093741/amazon-logo.jpeg","fqdn":"static.cryptobriefing.com","domain":"cryptobriefing.com","tld":"com"},"ip":{"addr":"104.25.17.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:59.157Z","timestamp":1785809939157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptobriefing.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Jul 2026 20:05:25 GMT","end":"Mon, 05 Oct 2026 21:04:08 GMT"},"fingerprint":{"sha1":"BE:0F:29:65:A5:FE:28:90:A7:EA:24:09:3B:38:DF:AF:F6:5D:06:FF","sha256":"39:0A:A5:A6:D2:94:7D:3F:81:06:25:DE:51:E5:FA:34:C0:F7:63:DC:5B:B0:43:E0:23:E2:91:76:C4:E7:46:2C"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/03093741/amazon-logo.jpeg HTTP/1.1\r\nHost: static.cryptobriefing.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 04 Aug 2026 02:18:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24420\r\nlast-modified: Mon, 03 Aug 2026 13:37:42 GMT\r\netag: \"e1226c0556e78474a3878b04635b6864\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\nx-amz-version-id: uV2HnCFHTsKT44BxGaqUrtWLC9dHBXMX\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: SzCw6QLpMLoFG1TLlashsiOYWhsfehYGtb_zZSgt8NgbGajugFUr0w==\r\ncf-polished: ok, orig_size=84434\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\nage: 553\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rpLnEVv706tHjoRMVzqBKy96psulPBP7uKEtRU7N6WjsD0mE3yh4CiNCIuKFXr7dU4TBlWJadYfmI5ZU%2Bkcnp%2BpKelbg9q0qSxZ7Fpr4zkt%2FtNhKRNaNj0fCvlR%2BjFGkdTeBiV9AYZpMYKo%3D\"}]}\r\ncf-ray: a25a1317c967a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24420,"size_decoded":25529,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x630, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a01c563137dd2e61e1e038a6ebca56ac","sha1":"ab3e302831d993fd4d6f6fbc33e09025dfabbff6","sha256":"965fe91da93359e6ee1a6074bee8e872bee9bfce00a93f6a926a291ba26832c9","sha512":"41ec3b22660a3a33a47118d70489b0ec36eec5c6ee2d30d4b9ba53f563edd82fbd66b663a63ec701202a699f66f7d2d0e5a949508cb037a0a29a79caca8a8b8e","ssdeep":"384:7nQTJp3KvNy3MQxrarfgsMkyrO1mYyV4ugQGQhg5gEvfKiVbfu1OvbFXovIhqxSv:j2LrarIsMky6Pu6B5TnBVVbFGIhk","tlshash":"c6b2f16915d9eb82fc45c595ad8db730a0af2112f26202957caf9f3f7f128d04ce9268","first_seen":"2026-08-04T02:19:25.891759Z","last_seen":"2026-08-04T02:19:25.891759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/10fg7kvn4n1qu.css","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.634Z","timestamp":1785809932634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/10fg7kvn4n1qu.css HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-2698b-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158091,"size_decoded":26029,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a3c609ac8e8635fc70a090081f22281e","sha1":"d87562f894009d983abb9ce3ad721563c6d2c1db","sha256":"a88ae2d1904302f64dc09dd46edd630c43696b491c60e962eaadbe213bf5cfb7","sha512":"709841628151a7d025918fb328153e4f3837af678e5d43c882015d4d76d603cf9708801d431ebdc220122ccacd53b06d138df8c4b550e38609b68c10fa1de8b2","ssdeep":"3072:ZTl64PYSchv8h8pB/qC1RyKGGF+XTYwyd3K7CJOFFKzAGuH/g1Jz6nGE+1kGX8qN:364PYSchv8h8pB/qC1RyKGGF+XTYwyqC","tlshash":"b7f363b0f2a5da7bbc1375bd97acf4cc6a0aa0a6dc1257f8f961a10513d37f26852d00","first_seen":"2026-07-31T04:26:56.844703Z","last_seen":"2026-08-04T02:19:25.895468Z","times_seen":7,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/register?_rsc=1r34m","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.413Z","timestamp":1785809933413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /register?_rsc=1r34m HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":838,"mime_type":"text/x-component","magic":"ASCII text","md5":"fcc11a46410033fc89fcb88563a05058","sha1":"46b6e99d12f2db8f33e449bbea4ec361f8cfc800","sha256":"7bba7964908a2ca100a2274ca5a0ba0f650684d766740c98368fc8f7b953e6e4","sha512":"1916f530e761f17fbcfb1d121b79b386c5de0b11e4a294453f159ceb115cd758b9652be7ffd3d07fd4402a0eec91d6f7c93344381f910c2d613439b74c8ecb4a","ssdeep":"","tlshash":"06f08173840dac896df0d858179ae70b54386a33b1b40c9cc5dfcde407a11791f8768b","first_seen":"2026-08-04T02:10:19.590254Z","last_seen":"2026-08-04T02:19:25.896656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/eth.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.664Z","timestamp":1785809932664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/eth.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"20d-19d360aca10\"\r\nlast-modified: Sat, 28 Mar 2026 20:02:50 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 294\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525,"size_decoded":759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed79179a3b6bc2c2ee4c54d8ade79b01","sha1":"14b7148647a28eb4f861f8da283a89f0acf1dec8","sha256":"1f94df8533f61806f7b17eaf9cd28678cdba66e1d82a9ca8f9fb38d35a907e9c","sha512":"590a8fde3f1bcac91ccd4dc2cc02f7ba602cc4b15f137c1f3758bcc5072c545167f7dae4c16837bde366561fd08ffdbfe5a087dee8f7e75feaec9ecc77a2fc8b","ssdeep":"","tlshash":"a5f08be95d287450682b1ffce67c98d3306771f40a3d0cf9b1800512e94995b9cd2b40","first_seen":"2023-05-10T14:51:47Z","last_seen":"2026-08-04T02:43:09.027934Z","times_seen":4307,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/xrp.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.665Z","timestamp":1785809932665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/xrp.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"18f-19d360b1060\"\r\nlast-modified: Sat, 28 Mar 2026 20:03:08 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399,"size_decoded":862,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84ce7542e288e2bf98a4da4dbde2594e","sha1":"e85496f0cf50b2158de788a0d87319e28dc9837b","sha256":"31fe41b6b3a4d98c9b46d7c37d60dea97fa5d9ebbd235ac5bfe23e4fd1eb8361","sha512":"5ab148cf574017486cc40e9f9ab0c94fb8065021114e4c226523c8aaf5ee6c97874c0dffe4dc843223454f1c8a1a94f8189acf2a2e091afe3181257a35bafcea","ssdeep":"","tlshash":"bee0aba935f4d405448a8ea9d52a30802011a11e3159067ab040f619f8a30e72c05ce8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-08-04T02:43:09.033495Z","times_seen":4313,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/ltc.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.678Z","timestamp":1785809932678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/ltc.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"ef-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":701,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b998e4df7a90659884c09adc7109c34a","sha1":"418edfb200e36785f015350f65095c42394efa41","sha256":"4298b9239a42dca1096a2c4da205688808813ad04b944d2a316029d4add81169","sha512":"fa8ea5fd2a8be6aad2d4a1c7ad1da84e8c7762650346a0637e83baf20fbf0001c53335713925420f2ee061d672ba73106be15b15eb4b9bc4625d4ce7d23aede1","ssdeep":"","tlshash":"2ed02371f46cf81ccc058d6cdf56b0c0204f11dd41cd137872984d11f2851cab044ead","first_seen":"2026-05-03T18:14:00.081427Z","last_seen":"2026-08-04T02:43:09.037438Z","times_seen":33,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.283Z","timestamp":1785809933283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: image/x-icon\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":10007,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-04T05:07:51.286837Z","times_seen":37518,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/login?_rsc=1pn8p","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.570Z","timestamp":1785809933570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /login?_rsc=1pn8p HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1828,"size_decoded":1211,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (975)","md5":"5010c7a4ebe8ab441a9e6fcebcf5b0a5","sha1":"7f7cb96a21b1b3a12d6bd24a6bc8ea016b7eda27","sha256":"bfd3e10f13818e7743289e83674f0fce355ae4c3add1c105dcc2fbc2ce73e3b8","sha512":"d7823d0a6eb26ea1f3526601fcb5559d85d897e3e94e6f11494752043d3b30fcd3d4e01d29c52fe69a667c5594e1aec6bf097572829b14002c2145858b54151a","ssdeep":"","tlshash":"84317b2ae809fd198ea6cc4c28bf932b939d593797341d95935ccd4803cc0772f996e1","first_seen":"2026-08-04T02:10:19.559251Z","last_seen":"2026-08-04T02:19:25.902861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/login?_rsc=9gbhl","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.746Z","timestamp":1785809933746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /login?_rsc=9gbhl HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /login/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1768,"size_decoded":1085,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (685)","md5":"56d12086da356ab15617ae791631c69d","sha1":"1b656c711484100a1eb6efcca100caab9fa9fcf0","sha256":"87a153140f02a90d7d628d5a21702eb3a1d483f7e739a275204aad0f50fc6a37","sha512":"6fb331050388a7aebee1b028e1b062de8baa946ed9ece55fb9a0ae41454e6f06aea83a15602ce3df03b3429df58195dc7382c4be413862ce2a430a101134657d","ssdeep":"","tlshash":"fe31021bdc1efe594c61cc5c3d6f5b2782889c37da308c99e29cdca8068c5bb1b991c1","first_seen":"2026-08-04T02:10:19.602543Z","last_seen":"2026-08-04T02:19:25.904666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fortune.com/img-assets/wp-content/uploads/2026/08/GettyImages-2268295164-e1785761391697.jpg?w=2048","fqdn":"fortune.com","domain":"fortune.com","tld":"com"},"ip":{"addr":"143.204.238.116","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:19:09.164Z","timestamp":1785809949164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortune.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 18 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"03:54:8D:46:1D:2F:40:F8:9F:35:73:B6:66:F3:6D:3D:C3:AA:1C:DE","sha256":"B9:71:8B:01:E3:53:5E:10:EC:07:27:F7:4B:0F:1B:43:5D:AB:E6:80:CF:28:3F:43:80:C8:CC:49:C6:C3:F7:76"}}},"request":{"raw":"GET /img-assets/wp-content/uploads/2026/08/GettyImages-2268295164-e1785761391697.jpg?w=2048 HTTP/1.1\r\nHost: fortune.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ncontent-length: 276072\r\nserver: nginx\r\ndate: Tue, 04 Aug 2026 02:19:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 04 Aug 2026 02:09:55 GMT\r\netag: \"fff21acb20d339c1\"\r\nx-bytes-saved: 607389\r\nvary: Accept\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 4888a1b692b693505c9036bc998623cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: HSfVzPyKiAOV-vNfagkcADGaVj3F2zdPiLjz5FXOWr2kGOF8UapNhA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":276072,"size_decoded":276670,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2048x1365, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b22338ec211a9fe3e9b383504e99a438","sha1":"c2fda4e5f463d30b36d7de306a85d11599cd8705","sha256":"d508144135b4ed3756c0d57fd8b9428169bdc4ca82e8c2979521edeb6bb0530f","sha512":"2fbc74aefa9d8e18f33b9a7c992e8beeeff78b15c001548753c3bb023e7fe409662ac4e0656f3038e7e3c3836dcf22d03bc355280e5997345aa5edff790a7a40","ssdeep":"6144:WL8QfnasNI8IfaHuD2Pl7mBiByOk/sWq9M:W3nasNI8rHuD2gyy1U5M","tlshash":"f14423cb5d9b8cc9325367e796376045337e6a6cd0d8e14a43a353340af285c2e6d897","first_seen":"2026-08-04T02:10:19.595533Z","last_seen":"2026-08-04T02:19:25.906003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":13,"connect":10,"send":0,"wait":20,"receive":28,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/register?_rsc=su3ji","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.752Z","timestamp":1785809933752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /register?_rsc=su3ji HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /register/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1768,"size_decoded":1085,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (685)","md5":"447338f2421a76e1088517e335873484","sha1":"9919b7df0fbf3e0c140053c6e212faaf611012ef","sha256":"caf8aceb5400b99b0b74560705a34ab2499b8a4df70e788a8ce391c2877b80b4","sha512":"82c34587557c42c6fcbb0b249caecdb089354a2a941a16db337350ba7328979626246f28a3e708cb667c384aacbb1203bb349362cc75e12fc551170444318c40","ssdeep":"","tlshash":"d3312e1bec1efe594c60cc5c3d6f9b2792889c37da308c89e29ddca8068d5b71b991c1","first_seen":"2026-08-04T02:10:19.61055Z","last_seen":"2026-08-04T02:19:25.907479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/05pa1r7xmxb8v.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.060Z","timestamp":1785809934060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/05pa1r7xmxb8v.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\netag: \"6a39960c-98ae-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:54 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39086,"size_decoded":14181,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39062), with no line terminators","md5":"05e5e4d6b1ab63b9a2af533b2be1d0dc","sha1":"1eadd58014196c3e7d8a2f7e37a3b8d3eea3ea27","sha256":"7ddfa0182ede15f98815f85b7efca83e58bf8386ee820b001c4d9b87213a7b44","sha512":"d081bdce0a9ef94952af9b0de95ae9bf25b3c456b1bfdb3a762267e36abaceb4deb293e8e6ca33379fc8f9906b3e4be96ae7509d2340e7bbb781c445862c5ed6","ssdeep":"768:B1rrih6BcH/3LnTt6pL09WDjDhW5yMWFjwTZ687ieeFl+80uHKyg:LviEBcHTTa4WnDhWN0sTZ7idO","tlshash":"cb03f87e978859cd6a43d2884d1fe0085aed577cb24e8c24f6eda8728752843f8b3f45","first_seen":"2026-07-31T04:26:56.899952Z","last_seen":"2026-08-04T02:19:25.908709Z","times_seen":7,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/04.i-__.as.dk.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.641Z","timestamp":1785809932641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/04.i-__.as.dk.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-abf6-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44022,"size_decoded":9946,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23989)","md5":"985425cd1ff033e452bd6e02ae135b4f","sha1":"0dfaedb36d6c92e5f684909c4bdcb626a9567acd","sha256":"b0222d1e95e92609c3da7c910a1962ef47567af3a5c9b14ac1e8134df9b9ea60","sha512":"cdf93f2816aa08b9c126aa2c6b2cfd68c4a73ab1459f1947ef2962db1dfc4c4d80497dcbb92eb9da353e5e562e65cb2e00e69ebfc0d43b0fb4a3a22b508c2010","ssdeep":"768:IS6Dia4/coVPkpc/s+zYXExp7ly1V0U4v:IS6DiZ/coVqnY","tlshash":"dd13e7b132d4faa3539341e0e43f2016f2780d7520ad6470b7e89c9b754d88da6befa5","first_seen":"2026-03-27T13:47:10.04459Z","last_seen":"2026-08-04T03:29:05.968259Z","times_seen":1092,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/01p8x36k.urzm.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.645Z","timestamp":1785809932645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/01p8x36k.urzm.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-b74e-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46926,"size_decoded":15986,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46064)","md5":"2dc072ee7143a14f806f2d362acab9e8","sha1":"38da81165f5e3ec9b9ae8858b759d0ecf47044d9","sha256":"e14ceb97893c88f82d3e3dfae713b57b8e07e8d53b1b7f23668c4f6973296926","sha512":"f20b3708192966329fb23d65c649ebfa8fdc74fa21a2c0c31cf27d28188948f7051120f84f1904c866d7e32a1203ce9d2ab1ede63216211d138e79898e1299fe","ssdeep":"768:e88UO1b3gmOZim1gCs3F7GwbcHUP4f5yoy1lVqesQ7Shmk:e88UO10mOZimZs3F71bcM4fatsQ7wmk","tlshash":"d52319c5b321a06143d7519394b60103f32e9988580a445cbb68defba9bced9b2f7f71","first_seen":"2026-08-04T02:10:19.604431Z","last_seen":"2026-08-04T02:19:25.910317Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/14dy0jim2o7h2.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.653Z","timestamp":1785809932653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/14dy0jim2o7h2.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-691a-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26906,"size_decoded":10565,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18685)","md5":"26d29d33266ed422b7fab6e7e16d0e3b","sha1":"a78c8c980fd42055e5d098d17227b33cc0ebc386","sha256":"13fba609e01804a6558f6f61dc96ae6e1909a8ca62b501757f7b60e078d207b6","sha512":"695c3c59f733b0733bc11a47db99707783ac68b896b2c0ead4982207042da9f3d32db9cc44d6892ec5ac560bc146377eb23cf428ed0098173592bacaea9c35bd","ssdeep":"384:Z1X6/w+1786BIsJAMShhP09Weq5jXqrEIj/KKISfK7uJhyp:HK/zl86BIsOMShe9WDjXqR0Sfvkp","tlshash":"7dc2a57e5b98a48e2787d2888d3ba00597ee023c314a9c55f3de58b68361c17d8f3f16","first_seen":"2026-07-31T04:26:56.848432Z","last_seen":"2026-08-04T02:19:25.912022Z","times_seen":10,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/api/crypto/prices","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.399Z","timestamp":1785809933399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /api/crypto/prices HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self';img-src 'self' data: https: http:;style-src 'self' 'unsafe-inline' https:;font-src 'self' https: data:;script-src 'self';object-src 'none';frame-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\netag: W/\"c04-DzU4DVdDbcw9fwOPpww8Qqd+cW4\"\r\norigin-agent-cluster: ?1\r\nratelimit-limit: 1000\r\nratelimit-policy: 1000;w=900\r\nratelimit-remaining: 951\r\nratelimit-reset: 249\r\nreferrer-policy: no-referrer\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 1157\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3076,"size_decoded":2315,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f6c5de0bc58e8f143785e9f22ca231e0","sha1":"0f35380d57436dcc3d7f038fa70c3c42a77e716e","sha256":"e725bc234cc5376c3f7b710456020f37de0723cc9fa324f8fd0d13916f91a8d4","sha512":"08cc6d7fa9bc1ccbf3d8692809c8a1fd52f3263ebdbd777cb4642da789e7003de6a108288da072d58f4c0341f014accc9bfcf07e82ff339ad56106c7b8d390f8","ssdeep":"","tlshash":"175106e3a221c0638da9df7a0d556259bd8feee6ec4d56051b3fcdc8449c0aed60dc42","first_seen":"2026-08-04T02:19:25.912954Z","last_seen":"2026-08-04T02:19:25.912954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.lookonchain.com/images/logo.png","fqdn":"www.lookonchain.com","domain":"lookonchain.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.052Z","timestamp":1785809934052,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: www.lookonchain.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T06:30:23.608803Z","times_seen":17703944,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ca-times.brightspotcdn.com/dims4/default/874bf40/2147483647/strip/false/crop/5184x3456+0+0/resize/1486x991!/quality/75/?url=https%3A%2F%2Fcalifornia-times-brightspot.s3.amazonaws.com%2Fd5%2F9c%2F00e46aea4416b8819579b946f960%2Fvirus-outbreak-college-graduations-24610.jpg","fqdn":"ca-times.brightspotcdn.com","domain":"brightspotcdn.com","tld":"com"},"ip":{"addr":"65.9.46.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:19:04.148Z","timestamp":1785809944148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ca-times.psdops.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:B4:EB:B2:55:B1:1D:9A:C6:DC:D1:01:7F:79:14:70:6B:35:02:33","sha256":"F2:87:84:A2:DD:09:78:1F:9A:01:CA:68:D0:8C:CE:A9:46:CA:11:69:42:1F:0E:70:41:3A:DE:97:43:A4:54:B3"}}},"request":{"raw":"GET /dims4/default/874bf40/2147483647/strip/false/crop/5184x3456+0+0/resize/1486x991!/quality/75/?url=https%3A%2F%2Fcalifornia-times-brightspot.s3.amazonaws.com%2Fd5%2F9c%2F00e46aea4416b8819579b946f960%2Fvirus-outbreak-college-graduations-24610.jpg HTTP/1.1\r\nHost: ca-times.brightspotcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: CloudFront\r\ndate: Tue, 04 Aug 2026 02:19:04 GMT\r\ncontent-length: 0\r\nvia: 1.1 8bb96662666aed5d95a28c5a383521c6.cloudfront.net (CloudFront)\r\nlocation: https://ca-times.brightspotcdn.com/e6/d8/cfc095d945c8bcbf2ce0cafcb527/placeholder-1x1.png\r\nx-cache: Error from cloudfront\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: -3rZt0eEvmOg_j07jZ1XV9sJHX5TX6ztnxZk4n-_FeF9eH9puf1oBQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T06:30:23.608803Z","times_seen":17703944,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":33,"connect":65,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thehill.com/wp-content/uploads/sites/2/2023/09/GettyImages-1460500012-e1785763898965.jpg?w=900","fqdn":"thehill.com","domain":"thehill.com","tld":"com"},"ip":{"addr":"151.101.193.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:19:14.161Z","timestamp":1785809954161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.thehill.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 22:16:55 GMT","end":"Sun, 27 Sep 2026 22:16:54 GMT"},"fingerprint":{"sha1":"0F:5A:FF:AD:BB:0F:E1:88:23:4C:97:D8:68:AC:42:02:CE:D7:7A:14","sha256":"FF:77:45:46:01:5A:EE:50:96:5E:8E:59:13:6B:57:A4:E8:02:D4:BA:CF:69:05:4B:A9:4B:A5:DF:69:6E:A7:87"}}},"request":{"raw":"GET /wp-content/uploads/sites/2/2023/09/GettyImages-1460500012-e1785763898965.jpg?w=900 HTTP/1.1\r\nHost: thehill.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\nlast-modified: Tue, 04 Aug 2026 02:10:00 GMT\r\netag: \"be79c261255c2811\"\r\nx-bytes-saved: 217362\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn2\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes, bytes\r\ndate: Tue, 04 Aug 2026 02:19:14 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT, MISS\r\nx-cache-hits: 0\r\nvary: Accept\r\nstrict-transport-security: max-age=300; includeSubDomains\r\nnxs-debug: state=PASS,vcl=9\r\ncontent-security-policy: default-src https: 'self'; upgrade-insecure-requests; base-uri 'none'; frame-src 'none'; object-src 'none'; font-src https: 'self' data:; img-src https: 'self' data: blob:; style-src https: 'self' 'unsafe-inline'; script-src 'strict-dynamic' 'unsafe-inline' https: 'nonce-6cc8a823d21a8173' 'sha256-d8ffe13d350039d84a77265ce790bf43965dcbd8ebbbcbed3701c3a65be75f7b';\r\ncontent-length: 119532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":119532,"size_decoded":120507,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x505, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fceff01f3cee94c24e8577656b4329d","sha1":"68f353b92029a49ee9256f313124c9f52d65d11a","sha256":"4b48f9861db96fa753708a34087cdab3f7ae1db4417be210b6d928c15021b1dd","sha512":"2d88511a5ed126cd2e334ad25e417a53bdb5d483f82d977e251ae5f9b8899f535921f94522c9f7d50f92d9ba9cda40c06215db3727bc8f73f0e4de8f0fae587c","ssdeep":"3072:SNMlGOA0EDUGrohzA+JIt0X4E5Yd0CPCN:8UAK0gzDIxEi0ck","tlshash":"35c3139c414c9c1fc99ec309912360c19927b12316df4a3339e66c8d7dea95b2f9ede1","first_seen":"2026-08-04T02:10:19.56604Z","last_seen":"2026-08-04T02:19:25.916032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":14,"receive":18,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-04T02:18:51.835Z","timestamp":1785809931835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"ztcd83r62c1i2m\"\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":70096,"size_decoded":11114,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65518), with no line terminators","md5":"00501fdd6f28ed903d34d67852392732","sha1":"a81e0c71ad65a9977df4b5e0e0850ecf03d4701f","sha256":"04d79f9b8c3a14016fa0b1970ef3e40432d9970391c505ab57bdb20161ee7628","sha512":"289a8f30e1a3743aa1699d66c8511ae0c2cc0694ce8dd0660ed09940649ac98c236bbf55ab574b9d65b6421f03ca2e716cbb1b61011285095b1040e25d646c00","ssdeep":"1536:xBWJX3pXiB1OUKWhr7pGhm4foKWhr7pGhm4fbUyC:xBWJnpXiB1dKWhr7pGhm4foKWhr7pGhQ","tlshash":"61638431b206bd3dd5638ea8f7797f7941efc639d60b881ce2acc25507c2c715a62a84","first_seen":"2026-08-04T02:10:19.560596Z","last_seen":"2026-08-04T02:19:25.917886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":72,"connect":68,"send":0,"wait":273,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/turbopack-0bqm-jxb130ve.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.642Z","timestamp":1785809932642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0bqm-jxb130ve.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-292e-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10542,"size_decoded":4646,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10542), with no line terminators","md5":"fc055a1d01641aeb68744889211daeb6","sha1":"b552ec0d12273c707b4f74ecd18f5d9aa509e448","sha256":"a560180d2186399cf27d2d13396bfe38a4556c39f4135c66fa3156b1331c9467","sha512":"4e9c5a1c8f6fe912f62a9ed6a39e03de9d66d6daf62525aef89d51148671b9bff25c2e77257b3d2a01581dd5badb5bd7cccb6787f513a5ba147f7f09e12f7328","ssdeep":"192:PXl4gM6A68kEsgdo2YE4hHBlqZyD+03sBT4fCT2cXX6ufH2:/l4gM6YPihlty+sqCTPG","tlshash":"0622b7da33a6f07343afa5ebd06f4004f17984a9145e141c939ca8eb2c354ae85e7f76","first_seen":"2026-07-31T04:26:56.832355Z","last_seen":"2026-08-04T02:19:25.920122Z","times_seen":10,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/05uj952y.wyr0.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.655Z","timestamp":1785809932655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/05uj952y.wyr0.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-67d7-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26583,"size_decoded":9083,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26583), with no line terminators","md5":"7ca87a43860df0bbe4c66c999ad7a463","sha1":"e6438cc5f7b6c018ecfeb4786a6b58aabd9e9366","sha256":"5f6b52ae0bda233718231e6ff2921f155ec799361ee08a977205c81f1ac1adac","sha512":"e673d1491a0982f784f38740d1fc15298ed636dd79f7beec375e05b4e944ad6bc07bcbdc6111b49717abe82425bd1817b738c56f6300bd23e08ba4f9d1687112","ssdeep":"384:ngDaNIFfEp6E+Ff8IiU5TFVT54UZg2oUhitiG/jXdjzV/KtPlOnZHASjFT:gDV5Tjzg2oUUBKtMHRjFT","tlshash":"c2c2b736690709be2aee93d7e05cead4dd395702d0098b4ce3874f319b49be8118bb1d","first_seen":"2026-05-03T18:14:00.144246Z","last_seen":"2026-08-04T02:43:09.050952Z","times_seen":33,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/login?_rsc=1tdii","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.573Z","timestamp":1785809933573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /login?_rsc=1tdii HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /login\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":767,"size_decoded":850,"mime_type":"text/x-component","magic":"ASCII text","md5":"4a16c1abd66dbdc2296e813b6eccba5a","sha1":"1c59a0a56d7a3f0db847de071a682e9832a6e9e5","sha256":"1af1b39e7fb4cd43ffcae715cb539cbe3865a48612393c5cfce26bddfa94dc96","sha512":"572f6c22060d6a032949ecd9bd300da920e3bbade9ca17a2508b152cfc9a0838721982b6d9d3efc70a014a33d2e66b913fef0e3022f94bbf70a4f8d7a7aba646","ssdeep":"","tlshash":"8401df16e80efe140c35cc4c6c6e532b83999c37aa3068e8a39ccc9802891bb1bd92c1","first_seen":"2026-08-04T02:10:19.578851Z","last_seen":"2026-08-04T02:19:25.922344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/api/public/news","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.593Z","timestamp":1785809933593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /api/public/news HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self';img-src 'self' data: https: http:;style-src 'self' 'unsafe-inline' https:;font-src 'self' https: data:;script-src 'self';object-src 'none';frame-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\netag: W/\"160e-9/UGuVRbAJRerFoFPGhxNIO4Ctc\"\r\norigin-agent-cluster: ?1\r\nratelimit-limit: 1000\r\nratelimit-policy: 1000;w=900\r\nratelimit-remaining: 948\r\nratelimit-reset: 248\r\nreferrer-policy: no-referrer\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 2322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5646,"size_decoded":3481,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"16620503e38b882a0840e55339b62395","sha1":"f7f506b9545b00945eac5a053c68713483b80ad7","sha256":"dad30ad11a2924b907530921e2af4939014404425427b82b60c019d66d617678","sha512":"1381b5bb580aa1a3cb0a6be084af3b86d57962fdb19be3f7eba95ac1659fba7082540377d1251f4060ffdd9b842b1ab2fdcd2d178137dc8d06e627b20d50a423","ssdeep":"96:193IFtLQrfBVXfQrKPDrjYQ/KfENPH4xj5MeW6IoqGFs5S2hkbRtegDUJ+TUjVaz:1JIHg1PAMNf4x9sNoqG25GtnojJayyZ","tlshash":"3fc1b67f1fb068384f8902c9b96a7d5dc184031ae2d5efa2dae6c70d62911ff5219cb0","first_seen":"2026-08-04T02:10:19.562855Z","last_seen":"2026-08-04T02:19:25.924659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/fiat/eur.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.668Z","timestamp":1785809932668,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/fiat/eur.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"426-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1062,"size_decoded":831,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e2a370bcfefde1d8c9dc6d9134a3b54","sha1":"705ca5fbca2cac157899fab03dd88ab0ead86422","sha256":"4fb28d762eae1c2a944326bb9f449d330b1fd36481a7dd4a3abaa6a91d0768ee","sha512":"8faff2640c2cb6166c48af9d0bf0bae96a01cbeaa986def1f42962be80abe0ec6c3d754ad2e29a2911b8f876ac0d38d443e4c18bdc5bb0cf061fd3fd3ce92831","ssdeep":"","tlshash":"1c117204bc21c45c0b085ae9c5eb7a8c400e928694634efff3610e9b567aa5e66bd30b","first_seen":"2026-05-03T18:14:00.166266Z","last_seen":"2026-08-04T02:43:09.046938Z","times_seen":33,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/api/public/news","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.401Z","timestamp":1785809933401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /api/public/news HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self';img-src 'self' data: https: http:;style-src 'self' 'unsafe-inline' https:;font-src 'self' https: data:;script-src 'self';object-src 'none';frame-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\netag: W/\"160e-9/UGuVRbAJRerFoFPGhxNIO4Ctc\"\r\norigin-agent-cluster: ?1\r\nratelimit-limit: 1000\r\nratelimit-policy: 1000;w=900\r\nratelimit-remaining: 950\r\nratelimit-reset: 249\r\nreferrer-policy: no-referrer\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 2322\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5646,"size_decoded":3481,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"16620503e38b882a0840e55339b62395","sha1":"f7f506b9545b00945eac5a053c68713483b80ad7","sha256":"dad30ad11a2924b907530921e2af4939014404425427b82b60c019d66d617678","sha512":"1381b5bb580aa1a3cb0a6be084af3b86d57962fdb19be3f7eba95ac1659fba7082540377d1251f4060ffdd9b842b1ab2fdcd2d178137dc8d06e627b20d50a423","ssdeep":"96:193IFtLQrfBVXfQrKPDrjYQ/KfENPH4xj5MeW6IoqGFs5S2hkbRtegDUJ+TUjVaz:1JIHg1PAMNf4x9sNoqG25GtnojJayyZ","tlshash":"3fc1b67f1fb068384f8902c9b96a7d5dc184031ae2d5efa2dae6c70d62911ff5219cb0","first_seen":"2026-08-04T02:10:19.562855Z","last_seen":"2026-08-04T02:19:25.924659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/register?_rsc=rjhjl","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.750Z","timestamp":1785809933750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /register?_rsc=rjhjl HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /register\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":767,"size_decoded":850,"mime_type":"text/x-component","magic":"ASCII text","md5":"4a16c1abd66dbdc2296e813b6eccba5a","sha1":"1c59a0a56d7a3f0db847de071a682e9832a6e9e5","sha256":"1af1b39e7fb4cd43ffcae715cb539cbe3865a48612393c5cfce26bddfa94dc96","sha512":"572f6c22060d6a032949ecd9bd300da920e3bbade9ca17a2508b152cfc9a0838721982b6d9d3efc70a014a33d2e66b913fef0e3022f94bbf70a4f8d7a7aba646","ssdeep":"","tlshash":"8401df16e80efe140c35cc4c6c6e532b83999c37aa3068e8a39ccc9802891bb1bd92c1","first_seen":"2026-08-04T02:10:19.578851Z","last_seen":"2026-08-04T02:19:25.922344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.630Z","timestamp":1785809932630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2 HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-bd30\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48432,"size_decoded":48817,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-04T06:34:51.602741Z","times_seen":86444,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0mi-yl4by_h7i.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.644Z","timestamp":1785809932644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0mi-yl4by_h7i.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-252b-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\ncontent-length: 3917\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9515,"size_decoded":4343,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9515), with no line terminators","md5":"7793c6e7a41ea24171852df2ca984605","sha1":"94c89cd6886ca3efb282926103038c8491fdb316","sha256":"b3280b8342944ed5401e0329baea9bd2d7174f3ea8140ff37d47280d32a3bed8","sha512":"691127fb85198ab3e0c0b53620887b99819d12ddca35e43348d7db2ab0fb82e50a1840b4875541b12193bdaf95c7f4ad7384fb9353163ccb21bb5efc03d73ba5","ssdeep":"192:mjc6AMZ8sGjb2mHtnGWUpF1GQ8iHL5ghMGIrD55R:mokZ8sGjSanGllh5vp","tlshash":"4a12c6dab2c5f4de439391c448276002e27e0a74244e9954f7ea98fbb660d0f90f3f69","first_seen":"2026-07-31T04:26:56.871102Z","last_seen":"2026-08-04T02:19:25.928687Z","times_seen":10,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/link.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.673Z","timestamp":1785809932673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/link.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"10b-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267,"size_decoded":730,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d3d306355ea867721a5f4d7adf6f922","sha1":"0a7e59252b437d8e38533ca0b729cffb3e8bfea9","sha256":"f7669f6366d2eaaa902ee142e738419ca0a29560010ce553157805ddc7adaee7","sha512":"4edfd5e138fe4d0037d131ac20d9e803e58037e7e81f38873fd4b321002860e6812cdce13f65a7050788dc1b4c7c2afab81817be5e60ea4c6964a8c9a291ebcc","ssdeep":"","tlshash":"49d05b7d7c38a404197d756c997f7661489fa18fc0494377e1442d11f6041d7f00bd64","first_seen":"2026-05-03T18:14:00.086405Z","last_seen":"2026-08-04T02:43:09.047559Z","times_seen":33,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ca-times.brightspotcdn.com/e6/d8/cfc095d945c8bcbf2ce0cafcb527/placeholder-1x1.png","fqdn":"ca-times.brightspotcdn.com","domain":"brightspotcdn.com","tld":"com"},"ip":{"addr":"65.9.46.73","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:19:04.253Z","timestamp":1785809944253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.ca-times.psdops.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Apr 2026 00:00:00 GMT","end":"Sun, 01 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5F:B4:EB:B2:55:B1:1D:9A:C6:DC:D1:01:7F:79:14:70:6B:35:02:33","sha256":"F2:87:84:A2:DD:09:78:1F:9A:01:CA:68:D0:8C:CE:A9:46:CA:11:69:42:1F:0E:70:41:3A:DE:97:43:A4:54:B3"}}},"request":{"raw":"GET /e6/d8/cfc095d945c8bcbf2ce0cafcb527/placeholder-1x1.png HTTP/1.1\r\nHost: ca-times.brightspotcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\ncontent-length: 69\r\nx-amz-cf-pop: ARN52-P1\r\ndate: Thu, 09 Jul 2026 18:56:17 GMT\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 05 Jun 2026 17:01:48 GMT\r\netag: \"fa992ca54fa38910f9e9c53880f4b043\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: sz2wZAT6YXx6ma.nYk0BtbCeNgrfIkVf\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nage: 2186568\r\nvia: 1.1 8bb96662666aed5d95a28c5a383521c6.cloudfront.net (CloudFront)\r\nx-amz-cf-id: r-0w3fpeDe35Qk5y-3FfDcsORn8fr_bTaBzVJnvdKTSTetbNI9H2Jw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":672,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced","md5":"fa992ca54fa38910f9e9c53880f4b043","sha1":"aadc49d5a6e6e133e5b5fe7392426c1c9a249aed","sha256":"99b085323e2a5b5306056d1963044a9a387652455d36228ffa9b176c83ff844c","sha512":"48e36052f0dc62fd8e268a125d20ef7d019bf957754014a826c44a22bd7e05fb61d8bbabaee39ae496a27bbba9b949acbb1b924e048cf31404d9ec782f950bf3","ssdeep":"","tlshash":"2da022e233220f3bc2080033b2002330ea3000282b000208002382bc3e2830cf0cc2c3","first_seen":"2026-07-14T16:33:26.156926Z","last_seen":"2026-08-04T03:30:02.917488Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/dot.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.677Z","timestamp":1785809932677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/dot.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"124-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 292\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292,"size_decoded":755,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbee1258a6d1ebc39b86499e226123da","sha1":"3fa54e0c656743d9d71c7ed6dd3e7325911f3f18","sha256":"80717610d578487c9ad86eedf7b8a7c676a47c10e3c4d1bad91d6c638507af82","sha512":"3f0588d21a3fd5b82654e92be8f765614a0ca8ef0ac571ced9851ed179cf34afd1f76c159d02fdab2903a364c7516f6262a6173bb34da9df971ad8bbf8b13d0b","ssdeep":"","tlshash":"d0e017a9b06ce8281b15802ca36f30e120af10de634e633c70951d2afa126eb3426379","first_seen":"2026-05-03T18:14:00.149119Z","last_seen":"2026-08-04T02:43:09.044571Z","times_seen":33,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/media/2a65768255d6b625-s.p.14by5b4al-y~f.woff2","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.628Z","timestamp":1785809932628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/media/2a65768255d6b625-s.p.14by5b4al-y~f.woff2 HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-963c\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvia: 2.0 Caddy\r\ncontent-length: 38460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38460,"size_decoded":38845,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38460, version 1.0","md5":"6da252de0cbc8a69b5d5c2e0e3f67722","sha1":"613a720fdf61e1c6f30818dee6517963a68e2e3e","sha256":"5d91eb5d522a03081946c44c8ca17c902230dfed5f0f9b5014262135d47b15b2","sha512":"54be801ab4db662f9db902ee580b2ba17c3f5b2fb8a9fc4871597c44c191c10acbc7a10c3219391b6f1beabb3f91bd883eef4cd968ca497cc8216238d212c98e","ssdeep":"768:ZCNlkG/MvYW+ATIdtH66hgjNd7PMiy6A0eRBGwCJdUu5nLct:aEwWMa6hgxVUiARBVMdFLU","tlshash":"4303f10ffbb3f38a846454b72a62c8f855a2e201a5ad5c0df7c830127492bd19e3d5e5","first_seen":"2025-09-13T18:39:29.216218Z","last_seen":"2026-08-04T05:17:37.791838Z","times_seen":6109,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0g85yg1df2bxt.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.636Z","timestamp":1785809932636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0g85yg1df2bxt.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-7cbc-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31932,"size_decoded":9709,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31932), with no line terminators","md5":"ec037f59a4323caca92bb61d73b7eaa9","sha1":"c061ab5cce46ac6c1318203efcb38d794f33bc48","sha256":"5015e4b717d4189e81e6fe9ec649b58bfae3885725c159204727e7fb42b8cd12","sha512":"242e8c8953ff9c8fe6b872f3d23815c7de956b9af1fda5ea211f0041a6df8f5347633628a0f3972672c6cba5e869fc1c9b1f7a6dd75769bb5f97199d81fe205d","ssdeep":"384:q+FjBPxpnakqZq+QOXXd967qf8J6otgG4uaFQW9Uiet6eUhp1NEBYjYvJCHSW37Z:q8j9naZZYGd967SBNEBqsCz37XSrJA","tlshash":"f4e294a971d5f4910b9354b5803f500bf23e0db6286da0a4e3f2dceab9a055dd133f9a","first_seen":"2026-07-31T04:26:56.877606Z","last_seen":"2026-08-04T02:19:25.932452Z","times_seen":10,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0ddgdwm51r~6p.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.061Z","timestamp":1785809934061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0ddgdwm51r~6p.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\netag: \"6a39960c-7f9e-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:54 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32670,"size_decoded":12137,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32220), with no line terminators","md5":"4a9afd39b35e959852ab63ed652b22b5","sha1":"dd5c4a7156ef4f6fab435f4ad0baca28876dad2d","sha256":"83d23413483cfea68f616ed26102a6f0e3798a389abc51cd6769ccb77283ca9e","sha512":"68ee0ae4b2ed0fda8fe9f9334c7ed842ce11376a92f3b65d484765693a723b3345b192ed3f5ca14b32982a3636e434563f3912f68c25ec4f97ed867caba0dbef","ssdeep":"768:JVWLLmg/PDLIi+mMbPMbKTyuWPColh+fp9aYZjbqyFhV7Y6GlKBDT7JZc:JVW/mgTLIi+mMbPMbGydudbqyFh9GlK2","tlshash":"f0e20ac2f2b1a95e6f3ea1ea340d010173ad5d56542f9088fbb86c962519bc5b0dbf3c","first_seen":"2026-07-31T04:26:56.864778Z","last_seen":"2026-08-04T02:19:25.933148Z","times_seen":10,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0fobcf1mdhsvg.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.063Z","timestamp":1785809934063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0fobcf1mdhsvg.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\netag: \"6a39960c-1a385-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:54 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107397,"size_decoded":17408,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"87493ea9ad07ad5954ce57562153175e","sha1":"aba3f856f74c94e953413fbf4bf04fbafd039c6b","sha256":"e7b956ba57b8b72268b37e283649419b44ff5f5cbba70b2a8f9a4c46541b30aa","sha512":"26d54d285cc82b5415dfa5caebf9af89a3974aa4729885a36934f2b11164ac82b55fabda395f0314596432c35748ccf376293d0809e6651134c3d4a388daa3e9","ssdeep":"768:lVJYwFAoy81xzNwpSitTjtV64bH6BcW6aPaR1i3byrqO6KhU2l2gG0j24D2DhQKQ:0ozxxwpLtNV64FRjf/0cYXm8fBMhF","tlshash":"fca30d24e155afdcb92749a4796ed00c601fbb5dce0fc869faf8a8152e4a4c47e03bc5","first_seen":"2026-07-31T04:26:56.866217Z","last_seen":"2026-08-04T02:19:25.933853Z","times_seen":10,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/16ksa~32zaksw.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.640Z","timestamp":1785809932640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/16ksa~32zaksw.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-216cf-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136911,"size_decoded":39145,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"75c6833c33ccac7df1c2cdaa346eef8b","sha1":"a45f60c01a93360a00cccba4c08e90dc42bf421f","sha256":"ebff0f3f3d44644dcc6875faaeb8c27072beed01aac5ca41f3c5dc63aca6174a","sha512":"57274ce5364f4b69cd5f226ad10adba06795fdd8f42495b9e6cf972bcc4bef569bd8670fc0620d2be810e6d4338f629cdcb4701eb5128955756f4605978eeadc","ssdeep":"1536:HFhA+g9ME/bx6sgoSdZNIjIQUFOQd449p4pzs/psnyaYbz+mrpeD4C0TT/S0LWXB:Hy7bxaocZWaFOQd440NYbSmMD50n/mXB","tlshash":"94d3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","first_seen":"2026-03-25T06:49:16.81672Z","last_seen":"2026-08-04T02:43:09.025157Z","times_seen":720,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0dzb1v89ku17t.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.648Z","timestamp":1785809932648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0dzb1v89ku17t.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-10db6-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69046,"size_decoded":24252,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65128), with no line terminators","md5":"4975530fac1a061cff082f2be8e0d908","sha1":"eacec5c0e72d158021f153352f191d386b819996","sha256":"3cb2fc7e6d5a3122b6e8a51dec9886fcdcb600a648246a191b6e3d5d4700bb40","sha512":"6b68987bb3d7e4aa87daa14ff530f7f9f2a37962c5191c93933c4d76ba1a1a8369ebb15586f13f2a80b58708f6646ff7c28c51ab0ac2ec939b9db6ddb4cf6d49","ssdeep":"768:/YNoaXfw5rpHiSzzsnVeOh8lRYThQThnTJKXT6RADusK5QoQ0Vvz2y3vT9xspb3h:/YNRIFHiSz5OhGyANTJJ+Iz2y3vT9xs","tlshash":"b8634d99726a7a2643dfc2c530511105a239de5a4448042dbfb4afdfe0e6dc9e3e7bb0","first_seen":"2026-07-31T04:26:56.824106Z","last_seen":"2026-08-04T02:19:25.935329Z","times_seen":10,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ledgergroup.net/socket.io/?EIO=4\u0026transport=websocket","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.405Z","timestamp":1785809933405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ledgergroup.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zIN0lA0YeEXw1cT8p8m1rw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://ledgergroup.net\r\nAlt-Svc: h3=\":443\"; ma=2592000\r\nConnection: upgrade\r\nDate: Tue, 04 Aug 2026 02:18:53 GMT\r\nSec-WebSocket-Accept: 9SlrTDwJeXN7mH6gBq8I8R4668Y=\r\nServer: Caddy, nginx\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nUpgrade: websocket\r\nVary: Origin\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":454,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T06:30:23.608803Z","times_seen":17703944,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":0,"connect":67,"send":0,"wait":245,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/07bslee604mrc.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.646Z","timestamp":1785809932646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/07bslee604mrc.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-94e4-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38116,"size_decoded":13905,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28348)","md5":"44316a595974994f7371d709f876ec74","sha1":"2df53e1a8b69a48c0d70393115fc1799187c22d3","sha256":"19fdc214b6e2a9c7433336800b84fd607b9dcda19c7116b0d7bf40406bba30a6","sha512":"f61c8f8c78fa4567cdad218e6b4fefb9bc62200d3d333974e98bc891145dc29c0ef9fab09ae32cd8f659229f610528b5ebbb0cc88173766e6e3cc0030ab78f63","ssdeep":"768:Z+6r2t+ewAE/madBD+LXB94RpmiqMH+JrkneOrk1ocuK:Z+6rTiFav+34RpmDMeVknrC9","tlshash":"7e03f980b691b02947e252c504af140af23dfa29a40d4c9cf265e4ea39f5dc995fff78","first_seen":"2026-08-04T02:10:19.592317Z","last_seen":"2026-08-04T02:19:25.936146Z","times_seen":2,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/doge.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.672Z","timestamp":1785809932672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/doge.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"13a-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314,"size_decoded":777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7f7c176ee4133e25decd6a2182a89e2","sha1":"c0a32f4ca46cebab8a588e1ea4795f038a4dcb5b","sha256":"3e0963e775bdf8174be4a5fbf5b04d61695f94b1ce8dae63116fb1c2d95556d3","sha512":"67a302e7ea1301a229bf3f006fdc1946e85576ebabc92aec06317fca829326dd2febfe872aa649433aead4564cd03c8f121697a4bbefdc1eca0eeeedfe8030aa","ssdeep":"","tlshash":"ebe07db0a56cd06ded924f7c15da25f4506e789f435c11ecb04d4d31e5431dfd89412e","first_seen":"2026-05-03T18:14:00.174231Z","last_seen":"2026-08-04T02:43:09.042081Z","times_seen":33,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/trx.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.680Z","timestamp":1785809932680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/trx.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"112-19dd4021ed0\"\r\nlast-modified: Tue, 28 Apr 2026 12:13:22 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 274\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274,"size_decoded":737,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b3368137f1e3145d1dc61c6cb71ddeb","sha1":"278a112106280a22ce5f08decb1a1924b5d5e9d8","sha256":"a63331d5b0d0d4a5c42da9292b7a786bff33a71a3d492eba6871ee78987480b8","sha512":"edf3151f33b1d9e70673fb703a9ea09a9ceda79a034dd417738c15fdfef0626cef1e38f658e0a35b5ac43ea667706dd3f2613d08642b4f31a1c3e363022876b2","ssdeep":"","tlshash":"2cd02b797539e804ca1acb781a6d75d0a08f209c818953f8b1850921f6501ceb545928","first_seen":"2026-05-03T18:14:00.150897Z","last_seen":"2026-08-04T02:43:09.038627Z","times_seen":33,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/login?_rsc=nn07o","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.572Z","timestamp":1785809933572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /login?_rsc=nn07o HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4679,"size_decoded":1536,"mime_type":"text/x-component","magic":"JavaScript source, ASCII text, with very long lines (1792)","md5":"a24eeaa77adb03059e55585c268cb5c4","sha1":"a87f2b104d03eb6a52a28d814e90a7a39bf69ba3","sha256":"5108375694d1c6e0e10a93e065293ce650529fe36b897b8cb800566cc284395a","sha512":"beb003ccb974a955acfcdeb5dab995987f605aee6c8f0b79c104c77c8769041671c9eb41d96a09529430c1734b8daaa7157769efa1141354a474b1bb52b70c10","ssdeep":"96:F4s5cq2r40r2Efj2klJx+4zkvRpal5xsp:SUiMvE1wRpal5S","tlshash":"b1a1d127e80efe594c25cc5d387f5b2786889c378a309d99e39cdda8428817b1fd92d1","first_seen":"2026-08-04T02:10:19.593779Z","last_seen":"2026-08-04T02:19:25.939682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/register?_rsc=1pn8p","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.748Z","timestamp":1785809933748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /register?_rsc=1pn8p HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ledgergroup.net/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: s-maxage=31536000\r\ncontent-encoding: gzip\r\ncontent-type: text/x-component\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1828,"size_decoded":1211,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (975)","md5":"5010c7a4ebe8ab441a9e6fcebcf5b0a5","sha1":"7f7cb96a21b1b3a12d6bd24a6bc8ea016b7eda27","sha256":"bfd3e10f13818e7743289e83674f0fce355ae4c3add1c105dcc2fbc2ce73e3b8","sha512":"d7823d0a6eb26ea1f3526601fcb5559d85d897e3e94e6f11494752043d3b30fcd3d4e01d29c52fe69a667c5594e1aec6bf097572829b14002c2145858b54151a","ssdeep":"","tlshash":"84317b2ae809fd198ea6cc4c28bf932b939d593797341d95935ccd4803cc0772f996e1","first_seen":"2026-08-04T02:10:19.559251Z","last_seen":"2026-08-04T02:19:25.902861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/17xn63i9hj2lf.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.638Z","timestamp":1785809932638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/17xn63i9hj2lf.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-37943-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227651,"size_decoded":74396,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b70d1719dcd1d3d315ecd6262d96878","sha1":"31c80d4311ad2a5ac0a460188165429e619c363f","sha256":"03c2c83d1743fb5804ecf299a037e5154ceaedbd2a6970fb95b380d606a4316f","sha512":"7047c57df22fbf8a0376dcaf016af8bc610c5a6e69978e56bfb97227a7d7bf0662b27684b847c30527f62f99c091d6dafb7028de519f24acb299cf85c7a83d88","ssdeep":"3072:g1Ltf0MDKFNY7770r28trhE8azbP0NqZJyX8QMAIGvn+K1toR:g1LtcOKFNYfz8ivyMENvn+K1toR","tlshash":"0224fbe83995f6626ab302b710af18037338252b280d4d60a351fd9db57845fb17bf9e","first_seen":"2026-04-05T14:03:06.210328Z","last_seen":"2026-08-04T02:43:09.026727Z","times_seen":53,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0.rh.w~mypu9j.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.657Z","timestamp":1785809932657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0.rh.w~mypu9j.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-18703-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100099,"size_decoded":22901,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65496), with no line terminators","md5":"e33f8b42a9834152bf8af2a432d52e76","sha1":"8703b1d47509ff834b54e6a508b189d1e60f5875","sha256":"bdc650a7d35c07c19ab64e6cc920f3cb4581a7462dfe7e55e0aa5e38f9f5e239","sha512":"97741e48ba56c8f24ebfdfee882aad43f1e745b1039b50bb69852b55a6ccafe011d00a7d9191b938a3090d99cccceb5ee41a43ee5f9c8463182273d188d89e85","ssdeep":"768:Y3gvz/gBVT1NYunQ0UyWOzjiZBm2XtBl9Qlmb2BOz0uQulKXAnqiG50YgV1zFVTL:YsKV8evIRli68eKXEzNhRfMLwx+TK15","tlshash":"bfa3f014e155bfacf9670998aa6e912c612f5f98ca0f8cb8f4f87c251a450d43b13bcd","first_seen":"2026-07-25T04:57:43.719581Z","last_seen":"2026-08-04T02:43:09.051571Z","times_seen":19,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/usdt.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.666Z","timestamp":1785809932666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/usdt.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"288-19d360aca10\"\r\nlast-modified: Sat, 28 Mar 2026 20:02:50 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":869,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f07b8f90c0eff1b76b402a2d34f0cdbe","sha1":"62c5226fbfa6a8f3c68c0e4f23f9c4bfeb05c299","sha256":"cddba428a029844888b59bae59c6400ee684b0d51dfc490a4374eef6bb63ea16","sha512":"63f9bb75b191310dc2d3e5840ddf0da27d72b2b1ad6000ca8bf1a3fd0c2562b14b25537d567de37f87ed2c64df288b363b5cfaa11e3f0fa53a17a9667ac40235","ssdeep":"","tlshash":"d4f073da6630d5c04862ca7eef7f1f89296b20e7615d0686f07a6e0ef4430d5705559c","first_seen":"2023-09-24T21:42:29Z","last_seen":"2026-08-04T02:43:09.046356Z","times_seen":4212,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/icons/crypto/ada.svg","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.670Z","timestamp":1785809932670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /icons/crypto/ada.svg HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: W/\"f23-19d360b1060\"\r\nlast-modified: Sat, 28 Mar 2026 20:03:08 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3875,"size_decoded":2448,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a429378d9e8284334b85f3d77382503a","sha1":"e08fa81f52301d4e66ddf8d4fd370f9259b595c6","sha256":"db824768c06f9d2e7cfe0c361da4e67eb6106b9d962f4190068b778e7314894e","sha512":"2d98e739c8bb402739ee045d2423e08590d279dd5e74a9210199d2ea9b84081b65683f1948e3ecdfd548d32b0145d2cbb5f6e0cd891af0ea8dbd0531540618a0","ssdeep":"","tlshash":"3e8174c223a0e34dcdc8d55defb1a8d1121b606d75fb64ca9edf8b48204bd8dfa01844","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-08-04T02:43:09.022751Z","times_seen":315,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/049n76~bl_5ob.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.067Z","timestamp":1785809934067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/049n76~bl_5ob.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\netag: \"6a39960c-5d9d-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:54 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23965,"size_decoded":8607,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23941), with no line terminators","md5":"72d2f7d1ab3b4a6d19b4d46148a41738","sha1":"28803aa4f5fb777c4352fb2b7285565b3bccb285","sha256":"00cfdd040c46cb9950b01381906bc244367b24f816f9309797e7b16d13431aae","sha512":"36e082986ece051e258c988b048b9bb78c2c80b99fccbde06d61416a7f1ad0647bc24d052ab23bcd4e7cf448878353c1c559250d32d793719543ef02ec0891cd","ssdeep":"384:rDOFNHk5nWOq3PG5nUf1T6BVyHExU7cmEwE+EmbmElzCJafcAVO3ucZKwQ:mPHwnG3PG5nUtT6BcH1GjvmbllBfcAVv","tlshash":"c1b2d764b084aeccaa974184a92fd04c712e2f3cc91fcc78faf8bc7516554957a63f89","first_seen":"2026-07-31T04:26:56.869709Z","last_seen":"2026-08-04T02:19:25.944588Z","times_seen":7,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0o4dpfc._c3ls.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.651Z","timestamp":1785809932651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0o4dpfc._c3ls.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-83b-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\ncontent-length: 995\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2107,"size_decoded":1419,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2107), with no line terminators","md5":"0a902371f87ec86bd374735dc091fe9e","sha1":"5cf091635966ee889a6aa10e5ec0a2836e4666dd","sha256":"f3ba9d50cf409b71c8fd39260146636ced0f630456edb8486ea564445144ecce","sha512":"7ac11ab6259cfba8b9e309a98fb29ef1289a395eedfcb5e3f132c1b3609b1eaeb1a34fa69f19e91519a64238b590150a0865bb8da036525a1078fe41e681d66d","ssdeep":"","tlshash":"ed414208e1429ecca957158c9a3fd00d62ae667ce70fdc69f0fd94722b5141a6de3b88","first_seen":"2026-05-03T18:14:00.105664Z","last_seen":"2026-08-04T02:43:09.036869Z","times_seen":33,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0ddv8_bxj_w6t.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.656Z","timestamp":1785809932656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0ddv8_bxj_w6t.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-20bbc-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134076,"size_decoded":46425,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b9b3b6b594f905ecb810050fd95d0b5e","sha1":"269eb7e4ea729aa40ca9798b5369a16a051b145d","sha256":"09d84e068f9f0cfeaf909663a47cda0285e53e777aea619ff45a1c528174a3d0","sha512":"647d47368152554341077d2f048a1c9453d8a274e13ea35972b3c44de8004a57f5bc4da4380530db1e84c3c723f5e37d41750d894b7ce4b46070dceb32ba7cb2","ssdeep":"1536:OqZcXFG1ygWgDvwd6FtVnBot1Q8Vxj6d/PJ8INqZ32xRI0FP+g8q3lxCvfLTgzna:hcoju+Kt1QbJrNq2y3L8G","tlshash":"1dd3f8e673517122d3cb5199c4af4b41b33b58d8300a443cb6bd9dcb296099962fbb3e","first_seen":"2026-03-30T02:25:32.689287Z","last_seen":"2026-08-04T02:43:09.057912Z","times_seen":45,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:53.284Z","timestamp":1785809933284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: image/x-icon\r\ndate: Tue, 04 Aug 2026 02:18:53 GMT\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nvia: 2.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":10007,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-04T05:07:51.286837Z","times_seen":37518,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.panewslab.com/images/logo1.jpg","fqdn":"image.panewslab.com","domain":"panewslab.com","tld":"com"},"ip":{"addr":"104.26.2.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:54.051Z","timestamp":1785809934051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"panewslab.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 09:46:21 GMT","end":"Sat, 03 Oct 2026 10:46:05 GMT"},"fingerprint":{"sha1":"6D:72:5D:D0:F1:8E:73:E9:89:51:95:C6:C6:EA:39:F0:F8:68:B8:C3","sha256":"14:8F:27:CD:F4:D5:79:6F:34:64:E0:B1:89:24:10:9F:27:74:EA:59:84:47:8D:F6:08:5C:13:DB:2A:64:ED:27"}}},"request":{"raw":"GET /images/logo1.jpg HTTP/1.1\r\nHost: image.panewslab.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 04 Aug 2026 02:18:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\naccess-control-allow-headers: *\r\nx-oss-request-id: 6A6D52281F7B1F31349A3F6A\r\naccept-ranges: bytes\r\netag: \"F6C40113323140F6144376916FA991D6\"\r\nlast-modified: Mon, 06 Jun 2022 08:46:38 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11381996718192679252\r\nx-oss-storage-class: Standard\r\ncontent-md5: 9sQBEzIxQPYUQ3aRb6mR1g==\r\nx-oss-server-time: 19\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: webp_bigger\r\ncf-bgj: h2pri,imgq:85\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\npriority: u=4,i\r\nage: 453\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH,HEAD\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lj%2BhCa6%2BfyQ1oB1L2%2FJ40vsL%2B3R%2BfVbuUF17xLqRiZ1gJ9GK7MNF7cScxhOOK67wa7Ps9TK78FpDr4ZPt5SHXcdxIxSwQ3kKQhoRrSNy3zNCURL1BqFlBnc9AxIK5SCqnzGlCOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a25a12f7ec7e56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2903\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2903,"size_decoded":4157,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"f354f44aef2e8869d919736204f8a562","sha1":"9fa7f719bfee9f85f28dc6bc93587c77966b7e78","sha256":"e407b5e2477bcd39c0d7f5499236fa021a6ba6dad025551f86ed503329c226ed","sha512":"f0ebb91bb1fd19afb34c90c854c5d3a3cf84b574ed1e5b464b889f9651ae6ada48250c239682d1fb3fe790d4d9601aa1d3dd092e00c09de9eb1ec2fb512c59e9","ssdeep":"","tlshash":"b2513ba0d1885809ede73ed73bb547379f74c9accda1d1a0262fd020abb356589430f2","first_seen":"2026-08-04T02:10:19.609328Z","last_seen":"2026-08-04T02:43:09.029129Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/0i.l9589uvx0j.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.650Z","timestamp":1785809932650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/0i.l9589uvx0j.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-d5eb-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54763,"size_decoded":13809,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54761), with no line terminators","md5":"8c982aaf9931256dfe2108595a389574","sha1":"4d38e8269a118fa3dd23e80a150d832c889be978","sha256":"32e9576b2b87cbc03075cbfde10797120b73b5c6e486723cd9e58a66d99c585d","sha512":"396749247a899dd4f29ef98a6d0bd622b3fa08d5909f76535c778a3befb72b9a325ad137f45f224ea59f9b02acfea1850d416bd24a27d89f321acf9f2e029756","ssdeep":"768:ChBJUWstOo8LEImqD9nhKFuvCDFZMQqi/mV:ChHJNEIZNieV","tlshash":"6433d9b53295faa302db91d9c0370012f2780d71309d64b4b394d8af799dd8a92f6f6a","first_seen":"2026-03-25T05:30:59.063144Z","last_seen":"2026-08-04T05:20:00.117908Z","times_seen":3524,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ledgergroup.net/_next/static/chunks/01w.kead659u-.js","fqdn":"ledgergroup.net","domain":"ledgergroup.net","tld":"net"},"ip":{"addr":"91.92.241.159","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ledgergroup.net/","date":"2026-08-04T02:18:52.652Z","timestamp":1785809932652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ledgergroup.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 08:48:43 GMT","end":"Sun, 25 Oct 2026 08:48:42 GMT"},"fingerprint":{"sha1":"09:B4:0A:5A:73:92:F1:4B:6C:A5:51:BE:CA:47:A9:72:58:D3:B2:B2","sha256":"DE:D9:7E:87:8B:32:4C:75:77:E4:32:7C:FD:4F:7D:51:11:A6:4A:45:60:79:2A:65:81:06:5E:24:3B:A2:C1:51"}}},"request":{"raw":"GET /_next/static/chunks/01w.kead659u-.js HTTP/1.1\r\nHost: ledgergroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ledgergroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Tue, 04 Aug 2026 02:18:52 GMT\r\netag: \"6a39960c-1c8e-gzip\"\r\nexpires: Wed, 04 Aug 2027 02:18:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 20:07:40 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 2.0 Caddy\r\ncontent-length: 3060\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7310,"size_decoded":3486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7310), with no line terminators","md5":"ac4616dacf20f79a5fe8de0239e93736","sha1":"b59c40dd77c295a0fe106aa2e7840dfc7669b3d3","sha256":"4a428ccf3ffa7b4389104d5fa86e232c734b8db3480bfbd3b5c8d5d4575c405d","sha512":"9b92ffd5f584d711a61db8494a268220acc1837c140a4e7242fa052ebf94babde5dd1d3834c4a3e08820057475b19eebc0b45d4353a7c5aec4da5953f653f206","ssdeep":"96:qpCGpzrBDHeoctuv28bWuq6UUFv2H0G8YnTquSE9X9JXiWqAtMqStIPv2BwbnB+4:qpCGVrBDaqWoUUFeULOB7TtJBMrIm628","tlshash":"2ce1d9b53091b5d092db0180812f840df33f2e39d45fa8a8a3fd9cf51aa041db2a2f95","first_seen":"2026-05-03T18:14:00.14191Z","last_seen":"2026-08-04T02:43:09.04331Z","times_seen":33,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-04","alert":"Sinkholed","trigger":"ledgergroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}